Vulnerability — CVE-2023-25295

CVE-2023-25295

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-25295
Description:: A Cross Site Scripting (XSS) vulnerability in evewa3ajax.php in GRUEN eVEWA3 Community 31 through 53 allows attackers to obtain escalated privileges via a crafted request to the login panel.
Last updated date:: 01/24/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 01/24/2024
Reference url to background: https://blog.munz4u.de/posts/2023/03/cve-2023-25295-ato-via-rxss-in-evewa3-community/