CVE-2023-40617

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A reflected cross-site scripting (XSS) vulnerability in OpenKnowledgeMaps Head Start 7 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'file' parameter in 'displayPDF.php'.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-406186.1A reflected cross-site scripting (XSS) vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer CVE-2023-406199.8phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controCVE-2023-406216.3SAP PowerDesigner Client - version 16.7, allows an unauthenticated attacker to inject VBScript code in a document and have it opened by an uCVE-2023-406229.9SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, under certain condition allows an authenticatCVE-2023-406237.1SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directorCVE-2023-406245.4SAP NetWeaver AS ABAP (applications based on Unified Rendering) - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, SAP_BCVE-2023-406255.4S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an autheCVE-2023-406267.5The language file parsing process could be manipulated to expose environment variables. Environment variables might contain sensible informaCVE-2023-406276.1A reflected XSS vulnerability was discovered in the LivingWord component for Joomla.CVE-2023-406286.1A reflected XSS vulnerability was discovered in the Extplorer component for Joomla.CVE-2023-406299.8SQLi vulnerability in LMS Lite component for Joomla.CVE-2023-40635.3Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request.