CVE-2023-33336

—

CVSS 3.1

4.8 medium

EPSS

<1%p46

Published

Jun 30, 2023 (Jun 30, 2023)

Modified

Jun 17, 2026

Description

Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via the double quotes.

Vendors: sophos
Products: web appliance
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.