CVE-2023-27775

MediumCVSS 5.4

Published: 12/04/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

41th percentile - higher than 41% of all known CVEs

A stored HTML injection vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary code via a crafted payload.

An attacker can exploit this vulnerability to hijack user sessions, steal sensitive data, or spread malware within the organization.

Immediately update LiveAction LiveSP to the latest available version and implement input validation and sanitization mechanisms.

Original NVD description (English source)

A stored HTML injection vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary code via a crafted payload.