Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-33751 EUVD-2023-37903GHSA-mj96-5xmp-7jr2

A stored cross-site scripting (XSS) vulnerability in mipjz v5.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted p…

Published May 25, 2023 · Updated Jan 31, 2025 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in mipjz v5.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at /app/tag/controller/ApiAdminTagCategory.php.

References