CVE-2023-33438: XSS
Published Jun 16, 2023
·Updated
A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML.
Affected Software
1 affected component
wolterskluwer Teammate\+=35.0.11.0
Event History
Jun 16, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-33438?
CVE-2023-33438 is a stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0.
2
How does CVE-2023-33438 affect Wolters Kluwer TeamMate+?
CVE-2023-33438 allows remote attackers to inject arbitrary web script or HTML.
3
What is the severity of CVE-2023-33438?
CVE-2023-33438 has a severity rating of medium (5.4).
4
How can I fix CVE-2023-33438?
To fix CVE-2023-33438, it is recommended to install the latest version of Wolters Kluwer TeamMate+ (35.0.11.0).
5
What is the CWE of CVE-2023-33438?
CVE-2023-33438 is associated with CWE-79, which is a Cross-Site Scripting (XSS) vulnerability.