| |
Vulnerability CVE-2023-6720
Published: 2023-12-13 Modified: 2023-12-14
| Description: |
An XSS vulnerability stored in Repox has been identified, which allows a local attacker to store a specially crafted JavaScript payload on the server, due to the lack of proper sanitisation of field elements, allowing the attacker to trigger the malicious payload when the application loads. |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
