Description
In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. It is possible for an attacker to craft a XSS payload and store that value within a device group.
If a WhatsUp Gold user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victims browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | WhatsUp Gold | 2023.0 – < 2023.1, 2022.0 – ≤ 2022.1 | 2023.1 |