Unrated severityNVD Advisory· Published Sep 25, 2023· Updated Sep 24, 2024

CVE-2023-43319

Description

Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter.

Affected products

IceWarp/WebClientdescription
IceWarp/WebClientllm-fuzzy
Range: =10.3.5

Patches

Vulnerability mechanics

References

medium.com/%40muthumohanprasath.r/reflected-cross-site-scripting-on-icewarp-webclient-product-cve-2023-43319-c2ad758ac2bcmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000