PT-2025-51288
CVE-2023-53870
·
Publicado
2025-12-15
·
Atualizado
2025-12-21
Descrição por
CVSS 4.0
5.1
MédiaMétricasAV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Jorani version 1.0.3
Description
The software contains a reflected cross-site scripting issue in the
language parameter. An attacker can inject malicious scripts by crafting XSS payloads within this parameter, potentially enabling the execution of arbitrary JavaScript and the theft of user session information.Recommendations
Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the
language parameter to prevent the injection of malicious scripts.Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾