CVE-2023-2509CWE-79

A Cross-Site Scripting(XSS) vulnerability was found on ADM

High · published May 17, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
26.0
In the wild
Unconfirmed
What it is

A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below, LooksGood 2.0.0.R129 and below and SoundsGood 2.3.0.r1027 and below.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00338 · 26.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-05-17T06:33Z
EPSS history
Timeline
  • 17 MAY 06:33Z
    A Cross-Site Scripting(XSS) vulnerability was found on ADM
    cvelistv5