This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel.
References
Configurations
History
01 Oct 2024, 11:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
05 Oct 2023, 00:56
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canopsis-capensis - Third Party Advisory | |
First Time |
Capensis
Capensis canopsis |
|
CPE | cpe:2.3:a:capensis:canopsis:23.04:alpha3:*:*:*:*:*:* | |
CWE | CWE-79 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.8 |
03 Oct 2023, 16:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-03 16:15
Updated : 2024-10-01 11:15
NVD link : CVE-2023-4564
Mitre link : CVE-2023-4564
CVE.ORG link : CVE-2023-4564
JSON object : View
Products Affected
capensis
- canopsis
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')