VULNERABILITY INTELLIGENCE

CVE-2023-44272

CVSS score5.4 MEDIUM

EPSS probability0.53%

CISA KEVNot currently listed

Published2023-10-04

Last modified2026-06-17

Description

A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user.