CVE-2023-5758

MediumCVSS 6.1/10Last modified Aug 19, 2026

Description

When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack. This vulnerability affects Firefox for iOS < 119.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Oct 25, 2023
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-57597.5In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the buffer was identified. Reported by Jason CVE-2023-57607.0A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads to an out-of-bounds CVE-2023-57617.5The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter CVE-2023-57628.8The Filr WordPress plugin before 1.2.3.6 is vulnerable from an RCE (Remote Code Execution) vulnerability, which allows the operating system CVE-2023-57639.8In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load maCVE-2023-57647.8A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation frCVE-2023-57659.8Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an atCVE-2023-57669.8A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to remotely execute codeCVE-2023-57676.1A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform crosCVE-2023-57686.1A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong receiveCVE-2023-57696.1A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform crosCVE-2023-57705.4Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject impr