Lucene search
MitreCVELIST:CVE-2023-24230HistoryFeb 10, 2023 - 12:00 a.m.
CVE-2023-24230
2023-02-1000:00:00
mitre
www.cve.org
cross-site scripting
formwork
arbitrary injection
0.001 Low
EPSS
Percentile
21.0%
A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page title parameter.
Related
osv
osv
CVE-2023-24230
2023-02-10 16:15:12
Formwork Cross-site Scripting (XSS) from Page title field
2023-02-10 18:30:32
github
github
Formwork Cross-site Scripting (XSS) from Page title field
2023-02-10 18:30:32
cve
cve
CVE-2023-24230
2023-02-10 16:15:12
veracode
veracode
Cross-Site Scripting (XSS)
2023-02-16 12:23:49
prion
prion
Cross site scripting
2023-02-10 16:15:00
nvd
nvd
CVE-2023-24230
2023-02-10 16:15:12