CVE-2023-3196

Canopsis (Capensis) suffers a stored cross-site scripting (XSS) vulnerability in the admin panel, where a attacker could inject malicious JavaScript via the login footer and login page description parameters. Connected sources consistently describe this as a stored XSS in the login/user-facing pa...

CVE-2023-4564

CVE-2023-4564 affects Canopsis (Capensis) with a stored cross-site scripting (XSS) flaw in the admin panel that allows an attacker to store a malicious JavaScript payload via the broadcast message parameter. The Red Hat, NVD, OSV, and related records consistently describe a stored XSS in the broa...