← All advisories

Medium severity5.4NVD Advisory· Published Jan 14, 2023· Updated Jun 17, 2026

CVE-2023-0300

CVE-2023-0300

Description

Cross-site Scripting (XSS) - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Opencollective/Alf.io
cpe:2.3:a:opencollective:alf.io:*:*:*:*:*:*:*:*
Range: <2.0-m4-2301
Alfio Event/Alf.iollm-fuzzy
Range: <2.0-M4-2301
alfio-event/alfio-event/alf.iov5
Range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/alfio-event/alf.io/commit/c1ae54ac84f1c7a5ec2831876f6445cb79be96fcnvdPatchThird Party Advisory
huntr.dev/bounties/0a91fec7-a76e-4ca3-80ba-81de1f10d59dnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.