CVE-2023-38883

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Nov 20, 2023
Updated: Nov 30, 2023
CWE ID 79

Summary

CVE-2023-38883 is a reflected cross-site scripting (XSS) vulnerability affecting OS4ED's openSIS Classic Community Edition version 9.0. This issue allows remote attackers to inject malicious JavaScript code into the 'ajax' parameter of 'ParentLookup.php'. Successful exploitation of this vulnerability enables attackers to execute arbitrary scripts in the web browser of unsuspecting users. This can lead to data theft, unauthorized account access, and other malicious activities. Users are strongly advised to update their software to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share