A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-04-11T00:00:00
Updated: 2024-08-02T11:53:54.584Z
Reserved: 2023-02-27T00:00:00
Link: CVE-2023-26847
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-04-11T15:15:10.590
Modified: 2023-04-21T20:15:07.543
Link: CVE-2023-26847
Redhat
No data.