CVE-2023-4676

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yordam MedasPro allows Reflected XSS.

This issue affects MedasPro: before 28.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-467607.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467617.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467627.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467635.3Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause backgCVE-2023-467645.3Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliCVE-2023-467657.5Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability.CVE-2023-467667.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467677.5Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions.CVE-2023-467687.5Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perform abnormally.CVE-2023-467697.5Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability.CVE-2023-46779.8Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the CVE-2023-467707.5Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prevention errors on user