CVE-2023-36995

MediumCVSS 6.1

Published: 06/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

TravianZ through version 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie.

Risk Assessment

XSS attacks can lead to user data theft and session hijacking, posing a serious threat to the application's security and its users.

Recommendation

It is recommended to update to the latest version of TravianZ to eliminate this vulnerability and implement additional protections against XSS attacks.

Original NVD description (English source)

TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie.