CVE Catalog

CVE-2023-39558

MediumCVSS 6.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.42%

33th percentile - higher than 33% of all known CVEs

Summary

AudimexEE v15.0 was found to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the Show Kai Data component.

Risk Assessment

Exploitation of these vulnerabilities could lead to user data theft or session hijacking, posing a serious security threat to the application.

Recommendation

It is recommended to update to the latest version of AudimexEE and implement appropriate filters and protections against XSS.

Original NVD description (English source)

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the Show Kai Data component.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS