CVE-2023-44272
Assigner: jpcert
Published: 2023-10-04T08:07:46.459Z
State: PUBLISHED
affected: vendor: Citadel
product: Citadel
versions: version: prior to 994
status: affected
descriptions: value: A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user.
problemTypes: descriptions: description: Cross-site scripting (XSS)
type: text