CVE-2023-49598: XSS
Stored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49598?
CVE-2023-49598 is classified as a stored cross-site scripting (XSS) vulnerability, which can lead to significant security risks if exploited.
How do I fix CVE-2023-49598?
To fix CVE-2023-49598, upgrade GROWI to version 6.0.0 or later, where this vulnerability has been addressed.
What versions of GROWI are affected by CVE-2023-49598?
CVE-2023-49598 affects all versions of GROWI prior to v6.0.0.
What can attackers do by exploiting CVE-2023-49598?
By exploiting CVE-2023-49598, attackers can execute arbitrary scripts in the web browser of users accessing the compromised site.
Is user data at risk due to CVE-2023-49598?
Yes, if exploited, CVE-2023-49598 can potentially lead to unauthorized access to user data through executed scripts.