CVE-2023-26846: XSS

Published Apr 11, 2023

Updated

A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates.

Affected Software

1 affected component

OpenCATS OpenCATS=0.9.7

Event History

Apr 11, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-26846?

CVE-2023-26846 is a stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7.

How does CVE-2023-26846 affect OpenCATS?

CVE-2023-26846 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at '/opencats/index.php?m=candidates'.

What is the severity of CVE-2023-26846?

CVE-2023-26846 has a severity rating of 5.4 (Medium).

How can I fix CVE-2023-26846 in OpenCATS v0.9.7?

To fix CVE-2023-26846 in OpenCATS v0.9.7, it is recommended to apply the latest security patch or upgrade to a newer version of OpenCATS.

Where can I find more information about CVE-2023-26846 and OpenCATS?

You can find more information about CVE-2023-26846 and OpenCATS at the following references: [GitHub](https://github.com/cassis-sec/CVE/tree/main/2023/CVE-2023-26846) and [OpenCATS](https://opencats.org).