CVE-2023-31664

The CVE-2023-31664 entry describes a reflected XSS in WSO2 API Manager prior to 4.2.0, exploitable via the tenantDomain parameter in /authenticationendpoint/login.do. Affected product is WSO2 API Manager; root cause is improper escaping/output handling of user-controlled input in tenantDomain, en...