CVE-2023-3831

LowCVSS 3.5

Published: 22/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile — higher than 22% of all known CVEs

Summary

A vulnerability was found in Bug Finder Finounce 1.0 affecting unknown processing of the file /user/ticket/create in the Ticket Handler component. Manipulation of the argument message leads to cross site scripting.

Risk Assessment

An attacker may remotely exploit this vulnerability, potentially leading to data theft or session hijacking.

Recommendation

It is recommended to update to the latest version of the software and implement input sanitization filters to prevent XSS attacks.

Original NVD description (English source)

A vulnerability was found in Bug Finder Finounce 1.0 and classified as problematic. This issue affects some unknown processing of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235157 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.