Skip to content
OpenAdvisories
Medium · 5.7 CVE-2023-4892 EUVD-2023-54731GHSA-3fm6-w3v5-p4r7

Teedy v1.11 - Stored cross-site scripting (XSS)

Published Sep 25, 2023 · Updated Sep 24, 2024 · Assigned by Fluid Attacks

Description

Teedy v1.11 has a vulnerability in its text editor that allows events

to be executed in HTML tags that an attacker could manipulate. Thanks

to this, it is possible to execute malicious JavaScript in the webapp.

Affected products

VendorProductAffectedFixed
Teedy Teedy 1.11 —

References