Unrated severityOSV Advisory· Published Jan 13, 2026· Updated Mar 5, 2026
Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) via file Parameter
CVE-2023-54341
Description
Webgrind 1.1 and before contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts via the file parameter in index.php. The application does not sufficiently encode user-controlled inputs, allowing attackers to execute arbitrary JavaScript in victim's browsers by crafting malicious URLs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=1.1
Patches
Vulnerability mechanics
References
2- www.exploit-db.com/exploits/51074mitreexploit
- www.vulncheck.com/advisories/webgrind-reflected-cross-site-scripting-xss-via-file-parametermitrethird-party-advisory
News mentions
0No linked articles in our index yet.