CVE-2023-33394

MediumCVSS 5.4

Published: 26/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

Skycaiji version 2.5.4 is vulnerable to Cross Site Scripting (XSS). Attackers can achieve backend access by deploying malicious JSON data.

Risk Assessment

Exploitation of this vulnerability could lead to control over the application backend, posing serious risks to user data and system integrity.

Recommendation

It is recommended to update to the latest version of Skycaiji to mitigate this vulnerability and implement input data filtering to minimize the risk of XSS attacks.

Original NVD description (English source)

skycaiji v2.5.4 is vulnerable to Cross Site Scripting (XSS). Attackers can achieve backend XSS by deploying malicious JSON data.