Medium severity6.1NVD Advisory· Published Jul 17, 2023· Updated Jun 17, 2026

CVE-2023-2960

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting (XSS).

This issue affects Oliva Expertise EKS: before 1.2.

Affected products

Olivaekspertiz/Oliva Ekspertiz
cpe:2.3:a:olivaekspertiz:oliva_ekspertiz:*:*:*:*:*:*:*:*
Range: <1.2
Oliva Expertise/Oliva Expertise EKSllm-fuzzy2 versions
<1.2+ 1 more
- (no CPE)range: <1.2
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.usom.gov.tr/bildirim/tr-23-0409nvdThird Party Advisory
siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0409nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000