CVE-2023-3071

MediumCVSS 5.4

Published: 02/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

40th percentile - higher than 40% of all known CVEs

A Cross-site Scripting (XSS) vulnerability - Stored in the GitHub repository tsolucio/corebos prior to version 8.

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to the latest version of the software to mitigate this vulnerability.

Original NVD description (English source)

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.