CVE-2023-0488 CRITICAL

CVE-2023-0488: Cross-site Scripting (XSS) - Stored in pyload/pyload

Vendor Pyload
Product pyload/pyload
Weakness CWE-79 · XSS
Published January 26, 2023
Last update March 31, 2025
View on NVD All CVEs

CVSS base score

9.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42.

Key dates

02Disclosure timeline

January 26, 2023 CVE published
March 31, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-59984 Junos Space: Global Search is vulnerable to reflected cross-site script injection CVE-2023-46613 WordPress Add to Calendar Button Plugin < 1.5.1 is vulnerable to Cross Site Scripting (XSS) CVE-2024-12915 Reflected XSS in Devinim Software's Modified Koha Library Software CVE-2025-60000 Junos Space: Generate Report page is vulnerable to reflected cross-site script injection CVE-2025-26938 WordPress Countdown Timer block plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability