CVE-2023-34830

43th percentile - higher than 43% of all known CVEs

i-doit Open v24 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the timeout parameter on the login page.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to update to the latest version of i-doit Open and implement appropriate input parameter filtering.