CVE-2023-34838
MediumCVSS 5.4Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the system, potentially leading to data breaches or malware installation.
Recommendation
It is recommended to update to the latest version of eScan software to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter.