CVE-2023-44012

Name of the Vulnerable Software and Affected Versions mojoPortal version 2.7.0.0

Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the helpkey parameter in the "Help.aspx" component. This enables the attacker to inject malicious scripts into the website, potentially leading to unauthorized actions.

Recommendations For mojoPortal version 2.7.0.0, avoid using the helpkey parameter in the "Help.aspx" component until a patch is available. As a temporary workaround, consider restricting access to the Help.aspx component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.