Security Advisory

CVE-2023-29998

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-07-07 00:00:00
Last updated 2024-11-14 19:45:14
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A Cross-site scripting (XSS) vulnerability in the content editor in Gis3W g3w-suite 3.5 allows remote authenticated users to inject arbitrary web script or HTML and gain privileges via the description parameter.