Medium severity4.8NVD Advisory· Published Jun 12, 2023· Updated Jun 17, 2026
CVE-2023-34855
CVE-2023-34855
Description
A Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: =1.02.040
- Youxun Electronic Equipment (Shanghai) Co., Ltd/AC Centralized Management Platformdescription
- cpe:2.3:a:ac_centralized_management_platform_project:ac_centralized_management_platform:1.02.040:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/hashshfza/Vulnerability/issues/1nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.