CVE-2023-5391

A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker toexecute arbitrary code on the targeted system by sending a specifically crafted packet to theapplication.

CVE-2023-5987

A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)vulnerability that could cause a vulnerability leading to a cross site scripting condition whereattackers can have a victim’s browser run arbitrary JavaScript when they visit a page containingthe injected pay...

CVE-2023-5986

A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded inputattackers can cause the software’s web application to redirect to the chosen domain after asuccessful login is pe...

CVE-2023-28003

A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker tomaintain unauthorized access over a hijacked session in PME after the legitimate user hassigned out of their account.