Persistent XSS Vulnerability in VX Search Enterprise 10.2.14

CVE-2023-49574

What is CVE-2023-49574?

A persistent cross-site scripting (XSS) vulnerability has been identified in VX Search Enterprise version 10.2.14. This security flaw allows attackers to execute malicious JavaScript code by leveraging the /add_job functionality, specifically targeting the job_name input field. When exploited, the vulnerability enables the attacker to store harmful scripts on the system, which are subsequently activated whenever the affected page is loaded. This presents significant security risks, as it may compromise user data and facilitate unauthorized actions on behalf of users.

References