CVE-2023-45958

CVE-2023-45958 affects Thirty Bees Core v1.4.0 with a reflected XSS via the backup_pagination parameter to /controller/AdminController.php, allowing arbitrary JavaScript execution in a user’s browser. Concrete details from multiple sources confirm the affected product/version and the vector; the ...

CVE-2023-45957

The vulnerability CVE-2023-45957 affects thirty bees prior to 1.5.0, in the admin/AdminRequestSqlController.php component. It is a stored XSS caused by error mishandling of $e->getMessage(), allowing an attacker to run arbitrary web script/HTML. The Red Hat/NVD/OSV and related entries corrobor...