CVE Catalog

CVE-2023-3319

MediumCVSS 5.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

21th percentile - higher than 21% of all known CVEs

Summary

CVE-2023-3319 describes an improper neutralization of input during web page generation in iDisplay PlatPlay DS, leading to Stored XSS vulnerabilities. This issue affects PlatPlay DS versions before 3.14.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking. Organizations using the affected version are at significant security risk.

Recommendation

It is recommended to update iDisplay PlatPlay DS to version 3.14 or later to mitigate this vulnerability. Additionally, conducting a security audit of web applications to identify other potential vulnerabilities is advisable.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iDisplay PlatPlay DS allows Stored XSS. This issue affects PlatPlay DS: before 3.14.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS