CVE-2023-26953

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.

Score

CVSS 3.1 4.8 Medium

Status

Modified - cve@mitre.org

Published

2023-03-07

Last modified

2025-03-04

Weaknesses

CWE-79

Affected products

• Onekeyadmin (Onekeyadmin)

References

• https://github.com/keheying/onekeyadmin/issues/8