medium6.1
CVE-2023-26599
XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated u…
Impact
XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Uniguest | Tripleplay | Version 3.4.0 |