CVE-2023-1536

Name of the Vulnerable Software and Affected Versions answerdev/answer versions prior to 1.0.7

Description The issue is related to Stored Cross-site Scripting (XSS) in the GitHub repository answerdev/answer. This type of attack allows an attacker to inject malicious scripts into a website, which are then stored on the server and executed by other users. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For versions prior to 1.0.7, update to version 1.0.7 or later to resolve the issue. As a temporary workaround, consider restricting access to user-inputted data to minimize the risk of exploitation. Avoid using potentially vulnerable API endpoints until the issue is resolved.