Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-5378

Stored XSS in SmodBIP and MegaBIP

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERT-PL

Description

Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range of vulnerable versions remains unknown.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Jan Syski MegaBIP

Default version status: unknown

  • 0 to ≤ 4.36.2affected
  • 5.08 to < *unaffected

Jan Syski SmodBIP

Default version status: affected

  • 0 to < *affected

References