CVE-2023-51436

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Cross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.8, which may allow a remote authenticated attacker with an administrative privilege to execute an arbitrary script on the web browser of the user who is using the product.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Japan System Techniques Co., Ltd.	UNIVERSAL PASSPORT RX	1.0.0 to 1.0.8
japan_system_techniques	universal_passport_rx	—

References

Timeline

Published: Jun 3, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2023

CVE-2023-514377.4Observable timing discrepancy vulnerability in Apache Pulsar SASL Authentication Provider can allow an attacker to forge a SASL Role Token t CVE-2023-514389.8A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC CVE-2023-514397.8A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcen CVE-2023-51448.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231.CVE-2023-514407.5A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0) (All CVE-2023-514417.2** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to per CVE-2023-514428.6Navidrome is an open source web-based music collection server and streamer. A security vulnerability has been identified in navidrome's subs CVE-2023-514435.9FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implement CVE-2023-514447.2GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vu CVE-2023-514454.8GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripti CVE-2023-514468.1GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to CVE-2023-514475.4Decidim is a participatory democracy framework. Starting in version 0.27.0 and prior to versions 0.27.5 and 0.28.0, the dynamic file upload