CVE-2023-0300

Cross-site Scripting (XSS) - Reflected in alfio-event/alf.io

CVSS 3.5 LOWEPSS 0.5%CWE-79

Cross-site Scripting (XSS) - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301.

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Affected products

alfio-event · alfio-event/alf.io

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/alfio-event/alf.io/commit/c1ae54ac84f1c7a5ec2831876f6445cb79be96fc https://huntr.dev/bounties/0a91fec7-a76e-4ca3-80ba-81de1f10d59d