CVE-2023-48387 (published 2023-12-15T08:40:34.306Z)
TAIWAN-CA(TWCA) JCICSecurityTool's Registry-related functions have insufficient filtering for special characters. An unauthenticated remote attacker can inject malicious script into a webpage to perform XSS (Stored Cross-Site Scripting) attack.
Affected products: Vendor: TAIWAN-CA(TWCA)
Product: JCICSecurityTool
Versions: 4.2.3.32