CVE-2023-47417: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in the component /shells/embedder.html of DZSlides after v2011.07.25 allows attackers to execute arbitrary code via a crafted payload...

PT-2023-30445 · Dzslides · Dzslides

Name of the Vulnerable Software and Affected Versions: DZSlides versions after 2011.07.25 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the /shells/embedder.html component. This allows attackers to execute arbitrary code via a crafted payload. Recommendations: F...