PT-2025-51288
CVE-2023-53870
·
Published
2025-12-15
·
Updated
2025-12-21
Description by
CVSS 4.0
5.1
MediumMetricsAV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Jorani version 1.0.3
Description
The software contains a reflected cross-site scripting issue in the
language parameter. An attacker can inject malicious scripts by crafting XSS payloads within this parameter, potentially enabling the execution of arbitrary JavaScript and the theft of user session information.Recommendations
Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the
language parameter to prevent the injection of malicious scripts.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾