Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3823 State: PUBLISHED Published: 2023-08-11T05:42:25.771Z Last Updated: 2025-02-13T17:01:48.139Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: PHP Group Products: PHP Description: In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities are loaded. This state is assumed to be unchanged unless the user explicitly changes it by calling appropriate function. However, since the state is process-global, other modules - such as ImageMagick - may also use this library within the same process, and change that glo
ess-global, other modules - such as ImageMagick - may also use this library within the same process, and change that global state for their internal purposes, and leave it in a state where external entities loading is enabled. This can lead to the situation where external XML is parsed with external entities loaded, which can lead to disclosure of any local files accessible to PHP. This vulnerable state may persist in the same process across many requests, until the process is shut down. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/security/advisories/GHSA-3qrf-m4j2-pcrr - https://lists.fedoraproject.org/archives/list/package-announce@lists.
/php-src/security/advisories/GHSA-3qrf-m4j2-pcrr - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7NBF77WN6DTVTY2RE73IGPYD6M4PIAWA/ - https://security.netapp.com/advisory/ntap-20230825-0001/ - https://lists.debian.org/debian-lts-announce/2023/09/msg00002.html
CVE ID: CVE-2023-3824 State: PUBLISHED Published: 2023-08-11T05:48:34.082Z Last Updated: 2025-02-13T17:01:48.673Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: PHP Group Products: PHP Problem Types: CWE-119 Description: In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/security/advisories/GHSA-jqcx-ccgc-xwhv - https://lists.fedoraproject.org/archives/list/
https://github.com/php/php-src/security/advisories/GHSA-jqcx-ccgc-xwhv - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7NBF77WN6DTVTY2RE73IGPYD6M4PIAWA/ - https://security.netapp.com/advisory/ntap-20230825-0001/ - https://lists.debian.org/debian-lts-announce/2023/09/msg00002.html
CVE ID: CVE-2023-3825 State: PUBLISHED Published: 2023-07-31T22:53:56.568Z Last Updated: 2024-10-21T18:15:51.966Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PTC Products: KEPServerEX Problem Types: CWE-400 Description: PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption. KEPServerEX uses OPC UA, a protocol which defines various object types that can be nested to create complex arrays. It does not implement a check to see if such an object is recursively defined, so an attack could send a maliciously created message that the decoder would try to decode
ject is recursively defined, so an attack could send a maliciously created message that the decoder would try to decode until the stack overflowed and the device crashed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-02
CVE ID: CVE-2023-3826 State: PUBLISHED Published: 2023-07-22T06:27:31.560Z Last Updated: 2024-08-02T07:08:50.536Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: IBOS Products: OA Problem Types: CWE-89 Description: A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=recruit/resume/edit&op=status of the component Interview Handler. The manipulation of the argument resumeid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235147. NOTE: The vendor was contac
o the public and may be used. The associated identifier of this vulnerability is VDB-235147. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235147 - https://vuldb.com/?ctiid.235147 - https://github.com/Wkingxc/CVE/blob/master/ibos_OA.md
CVE ID: CVE-2023-3827 State: PUBLISHED Published: 2023-07-22T09:00:05.183Z Last Updated: 2024-08-02T07:08:50.577Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Bug Finder Products: Listplace Directory Listing Platform Problem Types: CWE-79 Description: A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /listplace/user/ticket/create of the component HTTP POST Request Handler. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235148. NOTE: The vendor was c
ripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235148. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235148 - https://vuldb.com/?ctiid.235148
CVE ID: CVE-2023-3828 State: PUBLISHED Published: 2023-07-22T10:31:03.335Z Last Updated: 2024-08-02T07:08:50.237Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Bug Finder Products: Listplace Directory Listing Platform Problem Types: CWE-79 Description: A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0. It has been classified as problematic. This affects an unknown part of the file /listplace/user/coverPhotoUpdate of the component Photo Handler. The manipulation of the argument user_cover_photo leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235149 was assigned to this vulnerability. NOTE: The vendor
possible to initiate the attack remotely. The identifier VDB-235149 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235149 - https://vuldb.com/?ctiid.235149
CVE ID: CVE-2023-3829 State: PUBLISHED Published: 2023-07-22T11:31:03.726Z Last Updated: 2024-11-22T15:31:49.861Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Bug Finder Products: ICOGenie Problem Types: CWE-79 Description: A vulnerability was found in Bug Finder ICOGenie 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/ticket/create of the component Support Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack can be initiated remotely. VDB-235150 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any w
assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235150 - https://vuldb.com/?ctiid.235150
CVE ID: CVE-2023-3830 State: PUBLISHED Published: 2023-07-22T14:31:03.964Z Last Updated: 2024-08-02T07:08:50.471Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Bug Finder Products: SASS BILLER Problem Types: CWE-79 Description: A vulnerability was found in Bug Finder SASS BILLER 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /company/store. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-235151. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Prog
he vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235151 - https://vuldb.com/?ctiid.235151
CVE ID: CVE-2023-3831 State: PUBLISHED Published: 2023-07-22T15:00:05.545Z Last Updated: 2024-10-15T20:32:34.016Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Bug Finder Products: Finounce Problem Types: CWE-79 Description: A vulnerability was found in Bug Finder Finounce 1.0 and classified as problematic. This issue affects some unknown processing of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235157 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additio
o this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235157 - https://vuldb.com/?ctiid.235157
CVE ID: CVE-2023-3832 State: PUBLISHED Published: 2023-07-22T15:31:03.384Z Last Updated: 2024-08-02T07:08:50.660Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Bug Finder Products: Wedding Wonders Problem Types: CWE-79 Description: A vulnerability was found in Bug Finder Wedding Wonders 1.0. It has been classified as problematic. Affected is an unknown function of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. It is possible to launch the attack remotely. VDB-235158 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond
entifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235158 - https://vuldb.com/?ctiid.235158
CVE ID: CVE-2023-3833 State: PUBLISHED Published: 2023-07-22T16:00:05.360Z Last Updated: 2024-08-02T07:08:50.661Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Bug Finder Products: Montage Problem Types: CWE-79 Description: A vulnerability was found in Bug Finder Montage 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-235159. NOTE: The vendor was contacted early about this disclosure but did not respon
ifier of this vulnerability is VDB-235159. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235159 - https://vuldb.com/?ctiid.235159
CVE ID: CVE-2023-3834 State: PUBLISHED Published: 2023-07-22T17:00:05.094Z Last Updated: 2025-08-21T13:55:50.331Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Bug Finder Products: EX-RATE Problem Types: CWE-79 Description: A vulnerability was found in Bug Finder EX-RATE 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235160. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additi
ability is VDB-235160. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235160 - https://vuldb.com/?ctiid.235160
CVE ID: CVE-2023-3835 State: PUBLISHED Published: 2023-07-22T17:31:04.303Z Last Updated: 2024-10-15T20:22:36.101Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Bug Finder Products: MineStack Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Bug Finder MineStack 1.0. This affects an unknown part of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235161 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Addition
this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235161 - https://vuldb.com/?ctiid.235161
CVE ID: CVE-2023-3836 State: PUBLISHED Published: 2023-07-22T18:00:05.786Z Last Updated: 2024-08-02T07:08:50.600Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Dahua Products: Smart Park Management Problem Types: CWE-434 Description: A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePoint_addImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235162 is the identifier assigned to this vulnerability. NOTE: The vendor was cont
ed to the public and may be used. VDB-235162 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235162 - https://vuldb.com/?ctiid.235162 - https://github.com/qiuhuihk/cve/blob/main/upload.md
CVE ID: CVE-2023-3837 State: PUBLISHED Published: 2023-07-22T20:31:03.587Z Last Updated: 2024-11-22T15:00:12.486Z Severity: N/A (CVSS 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N) Vendors: n/a Products: DedeBIZ Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/sys_sql_query.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235188. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Note
5188. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235188 - https://vuldb.com/?ctiid.235188 - https://github.com/TXPH/CVE/blob/main/xss-report.pdf
CVE ID: CVE-2023-3838 State: PUBLISHED Published: 2023-07-23T01:31:03.915Z Last Updated: 2024-08-02T07:08:50.448Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: DedeBIZ Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in DedeBIZ 6.2.10. Affected by this vulnerability is an unknown functionality of the file /admin/vote_edit.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235189 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Addi
d to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235189 - https://vuldb.com/?ctiid.235189 - https://github.com/TXPH/CVE/blob/main/xss-report2.pdf
CVE ID: CVE-2023-3839 State: PUBLISHED Published: 2023-07-23T02:00:03.953Z Last Updated: 2024-08-02T07:08:50.555Z Severity: N/A (CVSS 4.3 AV:N/AC:H/Au:M/C:P/I:P/A:P) Vendors: n/a Products: DedeBIZ Problem Types: CWE-89 Description: A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the file /admin/sys_sql_query.php. The manipulation of the argument sqlquery leads to sql injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-235190 is the identifier assigned
own to be difficult. The exploit has been disclosed to the public and may be used. VDB-235190 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235190 - https://vuldb.com/?ctiid.235190 - https://github.com/TXPH/CVE/blob/main/sqli-report.pdf
CVE ID: CVE-2023-3840 State: PUBLISHED Published: 2023-07-23T02:31:03.547Z Last Updated: 2024-10-15T20:15:59.739Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: NxFilter Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in NxFilter 4.3.2.5. This affects an unknown part of the file /report,daily.jsp?stime=2023%2F07%2F12&timeOption=yesterday&. The manipulation of the argument user leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-235191. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional
ity is VDB-235191. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235191 - https://vuldb.com/?ctiid.235191
CVE ID: CVE-2023-3841 State: PUBLISHED Published: 2023-07-23T03:00:04.713Z Last Updated: 2024-08-02T07:08:50.573Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: NxFilter Problem Types: CWE-352 Description: A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown code of the file user.jsp. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The identifier of this vulnerability is VDB-235192. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.23
ut did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235192 - https://vuldb.com/?ctiid.235192
CVE ID: CVE-2023-3842 State: PUBLISHED Published: 2023-07-23T03:31:03.619Z Last Updated: 2024-11-22T14:59:42.809Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Pointware Products: EasyInventory Problem Types: CWE-428 Description: A vulnerability was found in Pointware EasyInventory 1.0.12.0 and classified as critical. This issue affects some unknown processing of the file C:\Program Files (x86)\EasyInventory\Easy2W.exe. The manipulation leads to unquoted search path. Attacking locally is a requirement. The identifier VDB-235193 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Addit
to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235193 - https://vuldb.com/?ctiid.235193
CVE ID: CVE-2023-3843 State: PUBLISHED Published: 2023-07-23T04:31:03.713Z Last Updated: 2024-08-02T07:08:50.418Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: mooSocial Products: mooDating Problem Types: CWE-79 Description: A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /matchmakings/question of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-235194 is the identifier assigned to this vulnerability. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properl
y. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235194 - https://vuldb.com/?ctiid.235194 - http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html
CVE ID: CVE-2023-3844 State: PUBLISHED Published: 2023-07-23T05:31:03.490Z Last Updated: 2024-08-02T07:08:50.586Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: mooSocial Products: mooDating Problem Types: CWE-79 Description: A vulnerability was found in mooSocial mooDating 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /friends of the component URL Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-235195. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working pro
35195. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235195 - https://vuldb.com/?ctiid.235195 - http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html
CVE ID: CVE-2023-3845 State: PUBLISHED Published: 2023-07-23T06:00:04.120Z Last Updated: 2024-08-02T07:08:50.676Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: mooSocial Products: mooDating Problem Types: CWE-79 Description: A vulnerability was found in mooSocial mooDating 1.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /friends/ajax_invite of the component URL Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235196. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly. A
OTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235196 - https://vuldb.com/?ctiid.235196 - http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html
CVE ID: CVE-2023-3846 State: PUBLISHED Published: 2023-07-23T07:00:05.025Z Last Updated: 2024-08-02T07:08:50.399Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: mooSocial Products: mooDating Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in mooSocial mooDating 1.2. This affects an unknown part of the file /pages of the component URL Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235197 was assigned to this vulnerability. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly. Additional Analyst No