CVE-2023-46854

Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature...

CVE-2023-46854

The CVE-2023-46854 issue affects the Proxmox proxmox-widget-toolkit prior to 4.0.9 used in multiple Proxmox products. It enables Cross‑Site Scripting via the Edit Notes (edIT notes/Comments) feature due to improper input handling, with a practical impact of potential script execution in a user’s ...