CVE Catalog

CVE-2023-33515

MediumCVSS 5.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.41%

32th percentile - higher than 32% of all known CVEs

Summary

SoftExpert Excellence Suite version 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.

Recommendation

It is recommended to upgrade to the latest version of SoftExpert Excellence Suite to mitigate this vulnerability.

Original NVD description (English source)

SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS