Multiple Stored XSS Vulnerabilities Discovered in Webserver Administration Interface

CVE-2023-41922

What is CVE-2023-41922?

A Cross-Site Scripting (XSS) vulnerability has been identified within the web server's administration interface due to improper input neutralization during the web page generation process. This flaw enables malicious actors to perform Stored XSS attacks, as the web server fails to adequately validate user inputs across multiple sections of its administrative interface. The resulting vulnerabilities provide an avenue for attackers to execute scripts in the context of a user's session, potentially compromising sensitive information and the integrity of the system.

References