CVE-2023-33335

Cross Site Scripting (XSS) in Sophos Sophos iView (The EOL was December 31st 2020) in grpname parameter that allows arbitrary script to be executed.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2023-07-05

Last modified

2024-11-26

Weaknesses

CWE-79

Affected products

• Iview (Sophos)

References

• https://inf0seq.github.io/cve/2023/05/03/Cross-Site-scripting-%28XSS%29-in-Sophos-iView.html