3 matches found
CVE-2023-38971
CVE-2023-38971 corresponds to a Cross Site Scripting vulnerability in the open‑source CMS framework Badaso, affecting versions 0.0.1 through 2.9.7. The issue stems from the rack number parameter in the add new rack function, which can be crafted to execute arbitrary code when processed by the app...
CVE-2023-38971
Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function...
CVE-2023-38971
Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function...