CVE-2023-43193

Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS)

published November 2, 2023

CVSS
—
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the forum that leads to XSS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00469 · 39.6th percentile
Published
2023-11-02T00:00Z
EPSS history
Timeline
  • 02 NOV 00:00Z
    Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS)
    cvelistv5