Skip to content

CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-39938

Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitrary script.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2023-09-05
Updated: 2024-09-30
Assigning organization: jpcert

Description

Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitrary script.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

i-PRO Co., Ltd. VI Web Client

prior to 7.9.6affected

References