Unrated severityNVD Advisory· Published Apr 4, 2023· Updated Feb 13, 2025

CVE-2023-26777

Description

Cross Site Scripting vulnerability found in : louislam Uptime Kuma v.1.19.6 and before allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation parameter of the status_page.js endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Louislam/Uptime Kumacpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.19.6

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/171699/Uptime-Kuma-1.19.6-Cross-Site-Scripting.htmlmitre
github.com/louislam/uptime-kuma/issues/2186mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000