Home Embedded Vulns General Vulns

CVE-2023-24230

MEDIUM 4.8

Our Analysis: Environment Specific

Our model has classified this vulnerability as relevant to Environment Specific Systems, helping your team prioritize efforts effectively.

Published Date February 10, 2023
Last Modified March 24, 2025
CVSS Vector Not Available

Description

A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page title parameter.

Potentially Affected Vendors