CVE-2023-54343

Published February 1st, 2026

View on NVD ↗

CVSS v3

6.4

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

QWE DL 2.0.1 mobile web application contains a persistent input validation vulnerability allowing remote attackers to inject malicious script code through path parameter manipulation. Attackers can exploit the vulnerability to execute persistent cross-site scripting attacks, potentially leading to session hijacking and application module manipulation.

QWE

Download and browse your documents on your iPhone, iPad and iPod. √ Cloud Manager √ File Manager with folders support √ iTunes File Sharing support √ Wi-Fi Transfer √ Passcode Lock

Apple App Store