CVE-2023-4892CWE-79

Teedy v1.11 - Stored cross-site scripting (XSS)

Medium · published September 25, 2023

CVSS v3.1
5.7
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

Teedy v1.11 has a vulnerability in its text editor that allows events

to be executed in HTML tags that an attacker could manipulate. Thanks

to this, it is possible to execute malicious JavaScript in the webapp.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-09-25T15:55Z
EPSS history
Timeline
  • 25 SEP 15:55Z
    Teedy v1.11 - Stored cross-site scripting (XSS)
    cvelistv5