medium5.4
CVE-2023-33780
A stored cross-site scripting (XSS) vulnerability in TFDi Design smartCARS 3 v0.7.0 and below allows attackers to execute arbitrary web scripts or HTML via inj…
Impact
A stored cross-site scripting (XSS) vulnerability in TFDi Design smartCARS 3 v0.7.0 and below allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the body of news article.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invernyx | Smartcars 3 | before 0.7.1 |