Medium · 5.4 CVE-2023-52059 EUVD-2023-56738GHSA-94r9-423h-h5m8

A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted paylo…

Published Feb 13, 2024 · Updated May 9, 2025 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field.

References

https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.46&type=patch
https://github.com/Tanguy-Boisset/CVE/blob/master/CVE-2023-52059/README.md