Medium severity5.4NVD Advisory· Published Aug 28, 2023· Updated Jun 17, 2026
CVE-2023-38969
CVE-2023-38969
Description
Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title parameter in the new book and edit book function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Badaso/Badasodescription
- Range: = 2.9.7
Patches
Vulnerability mechanics
References
2- github.com/anh91/uasoft-indonesia--badaso/blob/main/XSS2.mdnvdExploitThird Party Advisory
- panda002.hashnode.dev/badaso-version-297-has-an-xss-vulnerability-in-add-booksnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.