Medium severity6.1NVD Advisory· Published Feb 10, 2023· Updated Jun 17, 2026

CVE-2023-23286

Description

Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the server-log via username field from the login form.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Provide server/Provide serverdescription
Provide/serverllm-create
Range: 14.4

Patches

Vulnerability mechanics

References

f20.be/cves/provide-server-v-14-4nvdExploitThird Party Advisory
www.provideserver.senvdProduct
packetstormsecurity.com/files/171734/Provide-Server-14.4-XSS-Cross-Site-Request-Forgery-Code-Execution.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000