CVE-2023-36163

The CVE-2023-36163 entry documents a Cross-Site Scripting (XSS) vulnerability in IP-DOT BuildaGate v.BuildaGate5. The issue is exploitable via a crafted script injected into the URL parameter mc , enabling a remote attacker to execute arbitrary code. Public PoC details exist (ExploitDB) showing t...