CVE-2023-33438

MediumCVSS 5.4

Published: 16/06/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

40th percentile - higher than 40% of all known CVEs

Summary

A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML.

Risk Assessment

The risk includes potential session hijacking, account takeover, or display of malicious content, compromising data confidentiality and integrity.

Recommendation

Immediately update TeamMate+ to the latest patched version. Until then, restrict system access and implement input validation filters.

Original NVD description (English source)

A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML.