CVE-2023-47417

DZSlides versions after 2011-07-25 contain a Cross-Site Scripting (XSS) vulnerability in the /shells/embedder.html component. The issue allows an attacker to execute arbitrary code via a crafted payload. Root cause: vulnerable embedder.html component in DZSlides. Impact: potential arbitrary code ...