CVE-2023-41813

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Allows you to edit the Web Console user notification options. This issue affects Pandora FMS: from 700 through 774.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Dec 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-418146.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site SCVE-2023-418156.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site SCVE-2023-418165.0An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a locaCVE-2023-418172.8An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorizedCVE-2023-418185.0An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a locaCVE-2023-418196.1A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unaCVE-2023-41829.8A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown partCVE-2023-418205.0An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information abCVE-2023-418215.0A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user iCVE-2023-418224.8An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local applicationCVE-2023-418234.4An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauCVE-2023-418242.8An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling
CVE-2023-41813: Medium severity, CVSS 6.1 | Vulnix