CVE Catalog
CVE-2023-39558
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.42%
33th percentile - higher than 33% of all known CVEs
Summary
AudimexEE v15.0 was found to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the Show Kai Data component.
Risk Assessment
Exploitation of these vulnerabilities could lead to user data theft or session hijacking, posing a serious security threat to the application.
Recommendation
It is recommended to update to the latest version of AudimexEE and implement appropriate filters and protections against XSS.
Original NVD description (English source)
AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the Show Kai Data component.

