First published: Wed Nov 15 2023(Updated: )
Nukium nkmgls before version 3.0.2 is vulnerable to Cross Site Scripting (XSS) via NkmGlsCheckoutModuleFrontController::displayAjaxSavePhoneMobile.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Nukium Gls | <3.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this vulnerability is CVE-2023-47309.
The severity of CVE-2023-47309 is medium with a severity value of 5.4.
CVE-2023-47309 impacts Nukium nkmgls before version 3.0.2 by allowing Cross Site Scripting (XSS) attacks through NkmGlsCheckoutModuleFrontController::displayAjaxSavePhoneMobile.
Nukium Gls version before 3.0.2 is affected by CVE-2023-47309.
To fix CVE-2023-47309, update Nukium Gls to version 3.0.2 or higher.