VULNERABILITY INTELLIGENCE
CVE-2023-53870
EPSS probability0.36%
CISA KEVNot currently listed
Published2025-12-15
Last modified2026-06-17
Description
Jorani 1.0.3 contains a reflected cross-site scripting vulnerability in the language parameter that allows attackers to inject malicious scripts. Attackers can craft XSS payloads in the language parameter to execute arbitrary JavaScript and potentially steal user session information.
Weakness classification
- disclosure@vulncheck.com: CWE-79