VulnerabilityModified
CVE-2023-33408
Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS).
MEDIUM 5.4EPSS 0.55%
Does this matter?
Lower severity and a low EPSS score (0.55%). Track it; it rarely justifies an emergency change on its own.
Description
Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exists due to insufficient input validation in the application's user input handling in the security_helper.php file.
- CVSS 3.1
- 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.55% probability · 44th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- minical/minical
- Source
- cve@mitre.org
References
- https://github.com/Thirukrishnan/CVE-2023-33408Exploit, Third Party Advisory
- https://github.com/minical/minicalProduct
- https://github.com/Thirukrishnan/CVE-2023-33408Exploit, Third Party Advisory
- https://github.com/minical/minicalProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.