CVE-2023-42431

CVSS V2 None CVSS V3 None
Description
Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbitrary HTML into the profile image dialog on Special:Preferences. This only applies to the genuine user context.
Overview
  • CVE ID
  • CVE-2023-42431
  • Assigner
  • HW
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-10-30T10:48:21.487Z
  • Last Modified Date
  • 2023-10-30T10:50:52.614Z
History
Created Old Value New Value Data Type Notes
2024-06-25 13:49:55 Added to TrackCVE