CVE-2023-33408

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p44

Published

Jun 5, 2023 (Jun 5, 2023)

Modified

Jun 17, 2026

Description

Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exists due to insufficient input validation in the application's user input handling in the security_helper.php file.

Vendors: minical
Products: minical
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.