VULNERABILITY INTELLIGENCE

CVE-2023-48244

CVSS score6.1 MEDIUM

EPSS probability0.31%

CISA KEVNot currently listed

Published2024-01-10

Last modified2026-06-17

Description

The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.