CVE-2023-33736

MediumCVSS 5.4

Published: 31/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

31th percentile - higher than 31% of all known CVEs

Summary

Dcat-Admin v2.1.3-beta has a stored cross-site scripting (XSS) vulnerability that allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter.

Risk Assessment

This vulnerability could lead to user data theft or session hijacking, posing a significant security risk to the application and its users.

Recommendation

It is recommended to update Dcat-Admin to the latest version that addresses this vulnerability and to implement input validation and filtering.

Original NVD description (English source)

A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter.