CVE-2023-25309

MediumCVSS 6.1

Published: 11/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

40th percentile - higher than 40% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in Fetlife rollout-ui version 0.5 allows attackers to execute arbitrary code via a crafted URL in the delete a feature functionality.

Risk Assessment

The risk involves potential session hijacking, data theft, or unauthorized actions performed in the context of the victim's browser.

Recommendation

Immediately update Fetlife rollout-ui to the latest version and implement input validation and sanitization in the delete a feature functionality.

Original NVD description (English source)

Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui version 0.5, allows attackers to execute arbitrary code via a crafted url to the delete a feature functionality.