Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2023-29454

Persistent XSS in the user form

Description

Stored or persistent cross-site scripting (XSS) is a type of XSS where the attacker first sends the payload to the web application, then the application saves the payload (e.g., in a database or server-side text files), and finally, the application unintentionally executes the payload for every victim visiting its web pages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: affected

  • 4.0.0 to ≤ 4.0.45affected
  • 5.0.0 to ≤ 5.0.33affected
  • 6.0.0 to ≤ 6.0.16affected

References