CVE Catalog
CVE-2023-36666
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.35%
27th percentile - higher than 27% of all known CVEs
Summary
INEX IXP-Manager versions before 6.3.1 are vulnerable to XSS attacks. This affects files such as list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, overview.foil.php, cust.foil.php, and view.foil.php.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to upgrade INEX IXP-Manager to version 6.3.1 or later to mitigate this vulnerability.
Original NVD description (English source)
INEX IXP-Manager before 6.3.1 allows XSS. list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, page-header-preamble.foil.php, overview.foil.php, cust.foil.php, and view.foil.php may be affected.