CVE Catalog
CVE-2023-34599
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk1.69%
74th percentile - higher than 74% of all known CVEs
Summary
Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code.
Risk Assessment
Attackers can exploit these vulnerabilities to take control of user sessions or steal data.
Recommendation
It is recommended to update to the latest version of Gibbon to mitigate these vulnerabilities.
Original NVD description (English source)
Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code.