CVE-2023-41814

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Through an HTML payload (iframe tag) it is possible to carry out XSS attacks when the user receiving the messages opens their notifications. This issue affects Pandora FMS: from 700 through 774.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Dec 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-418156.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site SCVE-2023-418165.0An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a locaCVE-2023-418172.8An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorizedCVE-2023-418185.0An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a locaCVE-2023-418196.1A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unaCVE-2023-41829.8A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown partCVE-2023-418205.0An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information abCVE-2023-418215.0A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user iCVE-2023-418224.8An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local applicationCVE-2023-418234.4An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauCVE-2023-418242.8An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling CVE-2023-418252.8A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files.
CVE-2023-41814: Medium severity, CVSS 6.1 | Vulnix