medium4.8
CVE-2023-31298
Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary…
Impact
Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sesami | Cash Point \& Transport Optimizer | Version 6.3.8.6.718 |