CVE-2023-33732

Published May 31st, 2023

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval.

sahiloj/CVE-2023-33732

CVE-2023-33732 | eScan Management Console 14.0.1400.2281 | XSS in "New Policy" form via `type`, `txtPolicyType`, and `Deletefileval` parameters.

GitHub