CVE-2023-24721

MediumCVSS 5.4

Published: 10/04/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile - higher than 36% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web scripts or HTML.

Risk Assessment

The risk involves potential session hijacking, redirection to malicious sites, or unauthorized actions within the application context, compromising data confidentiality and integrity.

Recommendation

It is recommended to immediately upgrade LiveAction LiveSP to the latest available version and implement input filtering and validation mechanisms to prevent XSS attacks.

Original NVD description (English source)

A cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web scripts or HTML.