Vulnerability Details CVE-2023-26777
Cross Site Scripting vulnerability found in : louislam Uptime Kuma v.1.19.6 and before allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation parameter of the status_page.js endpoint.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.5%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2023-26777
-
cpe:2.3:a:uptime_kuma_project:uptime_kuma:-
-
cpe:2.3:a:uptime_kuma_project:uptime_kuma:1.19.6