CVE Catalog
CVE-2023-37613
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.38%
30th percentile - higher than 30% of all known CVEs
Summary
A cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the asset src parameter.
Risk Assessment
The organization may be exposed to attacks that could lead to user data theft or session hijacking.
Recommendation
It is recommended to update to the latest version of the software to eliminate this vulnerability and implement appropriate input filtering.
Original NVD description (English source)
A cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the asset src parameter.