medium6.1
CVE-2023-50609
Cross Site Scripting (XSS) vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute arbitrary code via …
Impact
Cross Site Scripting (XSS) vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute arbitrary code via a crafted script to ajax.aspx.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ava | Teaching Video Application Service Platform | Version 3.1 |