CVE-2023-31298

2023-12-2900:00:00

mitre

github.com

cross site scripting

sesami cash point & transport optimizer

user id

remote attackers

arbitrary code

sensitive information

AI Score

6.5

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user.