CVE-2023-0010 (published 2023-06-14T16:31:35.543Z)
A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the context of an authenticated Captive Portal user’s browser when they click on a specifically crafted link.

Affected products: Vendor: Palo Alto Networks
Product: PAN-OS
Versions: 11.0, 10.2, 10.1, 10.0, 9.1, 9.0, 8.1