CVE-2023-26847: XSS

Published Apr 11, 2023

Updated

A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates.

Affected Software

1 affected component

OpenCATS OpenCATS=0.9.7

Event History

Apr 11, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-26847?

The severity of CVE-2023-26847 is medium with a severity value of 5.4.

How does the stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 (CVE-2023-26847) work?

The vulnerability allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the state parameter at opencats/index.php?m=candidates.

What software is affected by CVE-2023-26847?

OpenCATS v0.9.7 is affected by CVE-2023-26847.

Is there a fix available for the CVE-2023-26847 vulnerability?

Currently, there is no known fix available for the CVE-2023-26847 vulnerability.

Where can I find more information about CVE-2023-26847?

You can find more information about CVE-2023-26847 at the following references: [GitHub](https://github.com/cassis-sec/CVE/tree/main/2023/CVE-2023-26847) and [OpenCATS](https://opencats.org).