CVE-2023-45889

A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.8 allows remote attackers to inject JavaScript into any webpage. NOTE: this issue exists because of an incomplete fix for CVE-2022-48612.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2024-01-23

Last modified

2025-05-30

Weaknesses

CWE-79

Affected products

• Oneclick (Classlink)

References

• https://blog.zerdle.net/classlink/
• https://blog.zerdle.net/classlink2/