Security Advisory

CVE-2023-43340

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-10-19 00:00:00
Last updated 2024-09-12 20:16:25
Assigner mitre
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters