CVEvulnerability
CVE-2023-33731
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-06-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
Reflected Cross Site Scripting (XSS) in the view dashboard detail feature in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the URL directly.
Affected configurations
• escanav escan management console 14.0.1400.2281
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/sahiloj/CVE-2023-33731/blob/main/CVE-2023-33731.md Exploit, Third Party Advisory
- https://owasp.org/www-community/attacks/xss/ Not Applicable
- https://github.com/sahiloj/CVE-2023-33731/blob/main/CVE-2023-33731.md Exploit, Third Party Advisory
- https://owasp.org/www-community/attacks/xss/ Not Applicable