CVE-2023-38970
Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of member parameter in the add new member function.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for uasoft-indonesia/badaso in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of member parameter in the add new member function.
Check your installed stack and versions against the current vulnerability feeds.