VULNERABILITY INTELLIGENCE

CVE-2023-38971

CVSS score5.4 MEDIUM

EPSS probability0.66%

CISA KEVNot currently listed

Published2023-08-29

Last modified2026-06-17

Description

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function.