VULNERABILITY INTELLIGENCE

CVE-2023-4892

CVSS score5.7 MEDIUM
EPSS probability0.45%
CISA KEVNot currently listed
Published2023-09-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Description

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp.

Weakness classification

  • help@fluidattacks.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references