2 matches found
CVE-2023-31779
Wekan v6.84 and earlier is vulnerable to Cross Site Scripting XSS. An attacker with user privilege on kanban board can insert JavaScript code in in "Reaction to comment" feature...
5.4CVSS5.4AI score0.0056EPSS
SaveExploits1References2
CVE-2023-31779: Improper Neutralization of Input During Web Page Generation
Wekan v6.84 and earlier is vulnerable to Cross Site Scripting XSS. An attacker with user privilege on kanban board can insert JavaScript code in in "Reaction to comment" feature...
5.4CVSS5.7AI score0.0056EPSS
SaveExploits1References3
20