CVE-2023-31703

Description

Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter.

References

https://github.com/sahiloj/CVE-2023-31703/blob/main/README.md

http://packetstormsecurity.com/files/172540/eScan-Management-Console-14.0.1400.2281-Cross-Site-Scripting.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS