CVE-2023-40617

Publication date

2023-09-13 00:00:00

Family

mitre

State

PUBLISHED

Description

A reflected cross-site scripting (XSS) vulnerability in OpenKnowledgeMaps Head Start 7 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the file parameter in displayPDF.php.