Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-45796

XSS vulnerability in Pilz PASvisu and PMI v8xx

Description

A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthenticated attacker to manipulate process data with potential impact on integrity and/or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pilz PMI v8xx

Default version status: unaffected

  • 0.0.0 to ≤ 2.0.33992affected

Pilz PASvisu

Default version status: unaffected

  • 0.0.0 to < 1.14.1affected

References