CVE-2023-41810

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerability allowed Javascript code to be executed in some Widgets' text box. This issue affects Pandora FMS: from 700 through 773.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Nov 23, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-418116.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site SCVE-2023-418128.8Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained CVE-2023-418136.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site SCVE-2023-418146.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site SCVE-2023-418156.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site SCVE-2023-418165.0An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a locaCVE-2023-418172.8An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorizedCVE-2023-418185.0An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a locaCVE-2023-418196.1A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unaCVE-2023-41829.8A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown partCVE-2023-418205.0An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information abCVE-2023-418215.0A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user i