CVE-2023-38971

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function...

CVE-2023-38971

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function...

CVE-2023-38971

CVE-2023-38971 corresponds to a Cross Site Scripting vulnerability in the open‑source CMS framework Badaso, affecting versions 0.0.1 through 2.9.7. The issue stems from the rack number parameter in the add new rack function, which can be crafted to execute arbitrary code when processed by the app...