← All advisories

Medium severity5.4NVD Advisory· Published Jan 14, 2023· Updated Jun 17, 2026

CVE-2023-0301

CVE-2023-0301

Description

Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Opencollective/Alf.io
cpe:2.3:a:opencollective:alf.io:*:*:*:*:*:*:*:*
Range: <2.0-m4-2301
GitHub/alf.iollm-fuzzy
Range: <2.0-M4-2301
Alfio Event/Alf.iollm-fuzzy
Range: <2.0-M4-2301
alfio-event/alfio-event/alf.iov5
Range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/alfio-event/alf.io/commit/21cb2866e5f58b4a2b4a2cb0066479bbb26f7b39nvdPatchThird Party Advisory
huntr.dev/bounties/8a91e127-2903-4c6b-9a66-e4d2e30f8decnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.