CVE-2023-33732

Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2023-05-31

Last modified

2025-01-10

Weaknesses

CWE-79

Affected products

• Escan Management Console (Escanav)

References

• https://github.com/sahiloj/CVE-2023-33733/blob/main/CVE-2023-33733.md