Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-29454


Stored or persistent cross-site scripting (XSS) is a type of XSS where the attacker first sends the payload to the web application, then the application saves the payload (e.g., in a database or server-side text files), and finally, the application unintentionally executes the payload for every victim visiting its web pages.


Published

2023-07-13T10:15:09.320

Last Modified

2025-02-13T17:16:18.773

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-79

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zabbix frontend ≤ 4.0.45 Yes
Application zabbix frontend ≤ 5.0.33 Yes
Application zabbix frontend ≤ 6.0.16 Yes

References