CVE-2023-45958

2023-10-1800:00:00

mitre

www.cve.org

thirty bees core

cross-site scripting

admincontroller_php

web browser

crafted payload

cve-2023-45958

0.0005 Low

EPSS

Percentile

17.0%

JSON

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at /controller/AdminController.php. This vulnerability allows attackers to execute arbitrary JavaScript in the web browser of a user via a crafted payload.