CVE-2023-38045

MediumCVSS 6.1

Published: 07/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

CVE-2023-38045 describes an improper neutralization of input during web page generation in the oneVote component for Joomla, allowing Cross-site Scripting (XSS) targeting non-script elements.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious code, potentially leading to user data theft or session hijacking.

Recommendation

It is recommended to update the oneVote component to the latest version to mitigate this vulnerability and implement additional security measures against XSS attacks.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements.