CVE-2023-6720
13.12.2023, 10:15
An XSS vulnerability stored in Repox has been identified, which allows a local attacker to store a specially crafted JavaScript payload on the server, due to the lack of proper sanitisation of field elements, allowing the attacker to trigger the malicious payload when the application loads.
Vendor | Product | Version |
---|---|---|
europeana | repox | 2.3.7 |
𝑥
= Vulnerable software versions