CVE-2023-34734
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Annet AC Centralized Management Platform version 1.02.040 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject malicious code that will be stored and executed in users' browsers.
Risk Assessment
Exploitation of this vulnerability may lead to session data theft and account takeover. It can also result in malware or other attacks on users.
Recommendation
It is recommended to update the Annet AC Centralized Management Platform to the latest version to mitigate this vulnerability. Additionally, implementing security mechanisms against XSS attacks is advisable.
Original NVD description (English source)
Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting (XSS) .

