CVE-2023-29454

Stored or persistent cross-site scripting (XSS) is a type of XSS where the attacker first sends the payload to the web application, then the application saves the payload (e.g., in a database or server-side text files), and finally, the application unintentionally executes the payload for every victim visiting its web pages.

Score

CVSS 3.1 5.4 Medium

Status

Modified - security@zabbix.com

Published

2023-07-13

Last modified

2025-11-03

Weaknesses

CWE-20, CWE-79

Affected products

• Frontend (Zabbix)
• Zabbix (Zabbix)

References

• https://lists.debian.org/debian-lts-announce/2023/08/msg00027.html
• https://support.zabbix.com/browse/ZBX-22985
• https://lists.debian.org/debian-lts-announce/2024/10/msg00000.html