XSS in Webigniter
CVE-2023-53735
WEBIGniter 28.7.23 contains a cross-site scripting vulnerability in the user creation process that allows unauthenticated attackers to execute malicious JavaScript code, enabling potential XSS attacks.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (29.5th percentile) — read the EPSS interpretation.
Affected products
- Webigniter — versions 28.7.23
Weakness classification (CWE)
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (third-party-advisory)