VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Jun 5, 2023· Updated Jun 17, 2026

CVE-2023-33969

CVE-2023-33969

Description

Kanboard is open source project management software that focuses on the Kanban methodology. A stored Cross site scripting (XSS) allows an attacker to execute arbitrary Javascript and any user who views the task containing the malicious code will be exposed to the XSS attack. Note: The default CSP header configuration blocks this javascript attack. This issue has been addressed in version 1.2.30. Users are advised to upgrade. Users unable to upgrade should ensure that they have a restrictive CSP header config.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Kanboard/Kanboard3 versions
    cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:kanboard:kanboard:*:*:*:*:*:*:*:*range: <1.2.30
    • (no CPE)range: <1.2.30
    • (no CPE)range: < 1.2.30

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.