Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2023/11/03 11:4 a.m.26 views

CVE-2023-4592 Improper Neutralization of Input During Web Page Generation in WPN-XM Serverstack

A Cross-Site Scripting vulnerability has been detected in WPN-XM Serverstack affecting version 0.8.6. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload through the /tools/webinterface/index.php parameter and retrieve the cookie session details of an...

6.1CVSS6.2AI score0.00424EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/03 11:4 a.m.42 views

CVE-2023-4592

CVE-2023-4592 concerns WPN-XM Serverstack 0.8.6. The vulnerability is a Cross-Site Scripting flaw allowing a remote attacker to send a crafted JavaScript payload via the "/tools/webinterface/index.php" parameter to access an authenticated user’s cookie/session information, enabling session hijack...

6.1CVSS6AI score0.00424EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder