National Cyber Warfare Foundation (NCWF)

National Cyber Warfare Foundation (NCWF) Forums

CVE-2023-42431

0 user ratings

2023-10-30 14:14:16
milo
CVEs
- archive --

Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbitrary HTML into the profile image dialog on Special:Preferences. This only applies to the genuine user context.

CVE-2023-42431
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42431
Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbitrary HTML into the profile image dialog on Special:Preferences. This only applies to the genuine user context.
2023-10-30T11:15:39Z

Source: CVEAnnouncements
Source Link: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42431

Comments	new comment
Nobody has commented yet. Will you be the first?

Forum

CVEs

National Cyber Warfare Foundation (NCWF) Forums

CVE-2023-42431

Comments