CVE-2023-37153

MediumCVSS 6.1

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.61%

45th percentile - higher than 45% of all known CVEs

Summary

KodExplorer version 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field.

Risk Assessment

Exploitation of this vulnerability may lead to the execution of malicious code in users' browsers, posing a threat to data security and application integrity.

Recommendation

It is recommended to update KodExplorer to the latest version to mitigate this vulnerability and implement input validation in the description field.

Original NVD description (English source)

KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vulnerability by injecting XSS syntax into the Description field.