CVE-2023-24322

A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2023-02-09

Last modified

2025-03-24

Weaknesses

CWE-79

Affected products

• Mojoportal (Mojoportal)

References

• https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md
• https://github.com/i7MEDIA/mojoportal/
• https://www.mojoportal.com/