CVE-2023-31779

medium

Description

Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board can insert JavaScript code in in "Reaction to comment" feature.

References

https://github.com/wekan/wekan/commit/47ac33d6c234359c31d9b5eae49ed3e793907279

https://github.com/wekan/wekan/blob/master/CHANGELOG.md

Details

Source: Mitre, NVD

Published: 2023-05-22

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 5.4

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N