CVE-2023-45958

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at…

published October 18, 2023

CVSS
—
EPSS
0%
Percentile
28.2
In the wild
Unconfirmed
What it is

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at /controller/AdminController.php. This vulnerability allows attackers to execute arbitrary JavaScript in the web browser of a user via a crafted payload.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00357 · 28.2th percentile
Published
2023-10-18T00:00Z
EPSS history
Timeline
  • 18 OCT 00:00Z
    Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at…
    cvelistv5