Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-36287

An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.129
EPSS Ranking 93.7%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2023-36287
  • Webkul » Qloapps » Version: 1.6.0
    cpe:2.3:a:webkul:qloapps:1.6.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved