medium6.1
CVE-2023-25295
A Cross Site Scripting (XSS) vulnerability in evewa3ajax.php in GRUEN eVEWA3 Community 31 through 53 allows attackers to obtain escalated privileges via a craf…
Impact
A Cross Site Scripting (XSS) vulnerability in evewa3ajax.php in GRUEN eVEWA3 Community 31 through 53 allows attackers to obtain escalated privileges via a crafted request to the login panel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gruen | Evewa3 | from 31 through 53 |