Medium severity4.8NVD Advisory· Published Dec 29, 2023· Updated Jun 17, 2026

CVE-2023-31298

Description

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sesami/Cash Point & Transport Optimizerdescription
Sesamie/Sesamiellm-fuzzy
Range: = 6.3.8.6
Sesami/CPTOllm-create
Range: = 6.3.8.6
Sesami/Cash Point \& Transport Optimizer
cpe:2.3:a:sesami:cash_point_\&_transport_optimizer:6.3.8.6.718:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

herolab.usd.de/en/security-advisories/usd-2022-0060/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000