A cross-site scripting vulnerability exists in Citadel versions prior to 994
published October 4, 2023
CVSS
—
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is
A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00534 · 44.2th percentile
Published
2023-10-04T08:07Z
EPSS history
Timeline
04 OCT 08:07Z
A cross-site scripting vulnerability exists in Citadel versions prior to 994