CVE Catalog
CVE-2023-3070
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.57%
43th percentile - higher than 43% of all known CVEs
Summary
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8, allowing malicious code to be stored in the application.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to upgrade to version 8 or later to mitigate this vulnerability and conduct a security audit of the application.
Original NVD description (English source)
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.

