CVE-2023-35792

21th percentile - higher than 21% of all known CVEs

Vound Intella Connect version 2.6.0.3 is vulnerable to stored Cross-site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts that will be executed in the victim's browser context.

Exploitation of this vulnerability may lead to user data theft or session hijacking, posing a serious threat to the organization's security.

It is recommended to update Vound Intella Connect to the latest version to mitigate this vulnerability and implement additional security measures against XSS attacks.