CVE-2023-45958

Published: 2023-10-18T22:15Z

Last Modified: 2024-11-21T08:27Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at /controller/AdminController.php. This vulnerability allows attackers to execute arbitrary JavaScript in the web browser of a user via a crafted payload. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt