CVE-2023-46483

Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function...

CVE-2023-46483

CVE-2023-46483 describes a Cross Site Scripting (XSS) vulnerability in Timetec AWDMS v2.0, exploitable via the remark parameter of the New Zone function. Affected: timetec AWDMS 2.0; root cause is unvalidated input in the remark field leading to information disclosure. CVSS v3.1 base score 5.4 (A...