CVE-2023-24086: XSS
Published Feb 13, 2023
·Updated
SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /customs/loanbyclass.php?reportView.
Affected Software
1 affected component
Slims Project Slims=9.5.2
Event History
Feb 13, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-24086?
CVE-2023-24086 is classified as a reflected cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2023-24086?
To fix CVE-2023-24086, ensure that proper input validation and output encoding are implemented in the affected component.
3
What components are affected by CVE-2023-24086?
CVE-2023-24086 affects the SLIMS software version 9.5.2 specifically in the /customs/loan_by_class.php?reportView component.
4
Can CVE-2023-24086 lead to data theft?
Yes, successful exploitation of CVE-2023-24086 can potentially lead to data theft through unauthorized script execution in users' browsers.
5
Is CVE-2023-24086 easily exploitable?
CVE-2023-24086 can be easily exploited by crafting a malicious request that includes script content in the vulnerable component.