Cross site scripting

2023-10-0222:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

mojoportal

remote attacker

arbitrary code

nvd

AI Score

6.4

Confidence

High

EPSS

0.059

Percentile

93.5%

JSON

Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component.

References

github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/tree/main/2023/CVE-2023-44012