CVE-2023-0578mediumCWE-79

CVE-2023-0578: medium-severity vulnerability in ASOS Information Technologies Book Cites

Multiple XSS in ASOS Information Technologies' Book Cites

Published 03 Mar 2023 · Updated 01 Jun 2026

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.4%

exploitation probability

0.4%top 70% of all CVEs

observed exploitation

nono source reports it

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting (XSS). This issue affects Book Cites: before 23.01.05.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

ASOS Information Technologies · Book Cites

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0125 https://www.usom.gov.tr/bildirim/tr-23-0125