CVE-2023-31703

Published May 17th, 2023

View on NVD ↗

CVSS v3

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter.

sahiloj/CVE-2023-31703

CVE-2023-31703 | eScan Management Console 14.0.1400.2281 | XSS in "Edit User" form via the `from` parameter in the URL.

GitHub