Vulnerability Details CVE-2023-44272
A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.0%
CVSS Severity
CVSS v3 Score 5.4
References
- https://code.citadel.org/citadel/citadel
- https://code.citadel.org/citadel/citadel/-/commit/f0dac5ff074ad686fa71ea663c8ead107bd3041e
- https://jvn.jp/en/jp/JVN08237727/
- https://www.citadel.org/download.html
- https://code.citadel.org/citadel/citadel
- https://code.citadel.org/citadel/citadel/-/commit/f0dac5ff074ad686fa71ea663c8ead107bd3041e
- https://jvn.jp/en/jp/JVN08237727/
- https://www.citadel.org/download.html