medium5.4
CVE-2023-52059
A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…
Impact
A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gestsup | Gestsup | before 3.2.46 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.46&type=patch
- https://github.com/Tanguy-Boisset/CVE/blob/master/CVE-2023-52059/README.md
- https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.46&type=patch
- https://github.com/Tanguy-Boisset/CVE/blob/master/CVE-2023-52059/README.md