CVE-2023-41642
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
Multiple reflected XSS vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWSTATE parameter.
Risk Assessment
Attackers can exploit these vulnerabilities to steal user data or hijack sessions, posing a serious security threat to the organization.
Recommendation
It is recommended to update the application to the latest version and implement appropriate security measures against XSS attacks.
Original NVD description (English source)
Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWSTATE parameter.