Vulnerability Details CVE-2023-33387
A reflected cross-site scripting (XSS) vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.3%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2023-33387
-
cpe:2.3:a:datev:eg_personal-management_system_comfort/comfort_plus:*
-
cpe:2.3:a:datev:eg_personal-management_system_comfort/comfort_plus:16.1.1