Medium severity6.1NVD Advisory· Published Apr 19, 2023· Updated Jun 17, 2026

CVE-2023-26599

Description

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link.

Affected products

Uniguest/Tripleplay
cpe:2.3:a:uniguest:tripleplay:3.4.0:*:*:*:*:*:*:*
Tripleplay Platform/Tripleplay Platformdescription
Tripleplay/Platformllm-fuzzy
Range: <Caveman 3.4.0

Patches

Vulnerability mechanics

References

tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-26599-Summary.pdfnvdVendor Advisory
tripleplay.tvnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000