CVE-2023-34840

MediumCVSS 6.1

Published: 30/06/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

44th percentile - higher than 44% of all known CVEs

The angular-ui-notification library versions 0.1.0, 0.2.0, and 0.3.6 were found to contain a cross-site scripting (XSS) vulnerability.

An attacker can inject malicious scripts, potentially leading to theft of user session data or takeover of the application interface.

Update the angular-ui-notification library to the latest available version that fixes this vulnerability.

Original NVD description (English source)

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting (XSS) vulnerability.