CVE-2023-47437
28.11.2023, 00:15
A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists due to inadequate input validation in the Project Description and comments, which enables an attacker to inject malicious java script.
Vendor | Product | Version |
---|---|---|
pachno | pachno | 𝑥 < 1.0.6 |
𝑥
= Vulnerable software versions