CVE-2023-3668
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
In the GitHub repository froxlor/froxlor prior to version 2.0.21, there is improper encoding or escaping of output.
Risk Assessment
This vulnerability may lead to XSS attacks, posing a threat to the application's security and user data.
Recommendation
It is recommended to upgrade to version 2.0.21 or later to mitigate this vulnerability.
Other vulnerabilities in froxlor/froxlor
See all- CVE-2023-3173Critical
Improper restriction of excessive authentication attempts exists in GitHub repository froxlor/froxlor prior to version 2.0.20.
- CVE-2023-4304Low
Business logic errors in the GitHub repository froxlor/froxlor prior to version 2.0.22 and 2.1.0 may lead to unauthorized access or improper application behavior.
- CVE-2023-3192Medium
Session Fixation vulnerability in GitHub repository froxlor/froxlor prior to version 2.1.0.
- CVE-2023-3172High
There is a Path Traversal vulnerability in the GitHub repository froxlor/froxlor prior to version 2.0.20.
Original NVD description (English source)
Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21.