CVE-2023-1240 HIGH

CVE-2023-1240: Cross-site Scripting (XSS) - Stored in answerdev/answer

Vendor Answerdev
Product answerdev/answer
Weakness CWE-79 · XSS
Published March 7, 2023
Last update March 4, 2025
View on NVD All CVEs

CVSS base score

8.0/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Key dates

02Disclosure timeline

March 7, 2023 CVE published
March 4, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-12176 SourceCodester CET Automated Grading System with AI Predictive Analytics index.php cross site scripting CVE-2024-2179 Concrete CMS version 9 before 9.2.7 is vulnerable to Stored XSS via the Name field of a Group type CVE-2021-36872 WordPress Popular Posts plugin <= 5.3.3 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability CVE-2022-32174 Gogs - XSS CVE-2023-49813 WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)