Cross-Site Scripting Vulnerability in Pilz PASvisu Product
CVE-2023-45795

7.8HIGH

Key Information:

Vendor

Pilz

Status
Pmi V8xx
Pasvisu
Vendor
CVE Published:
22 June 2026

What is CVE-2023-45795?

A cross-site scripting vulnerability exists within the Builder Component of Pilz PASvisu, allowing local unauthenticated attackers to inject malicious JavaScript. This exploit can enable adversaries to gain unauthorized control of the device, potentially leading to severe security breaches.

Affected Version(s)

PASvisu 0.0.0 < 1.14.1

PMI v8xx 0.0.0 <= 2.0.33992

References

https://certvde.com/en/advisories/VDE-2023-050/
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.