CVE-2023-4090

—

CVSS 3.1

6.1 medium

EPSS

<1%p23

Published

Oct 4, 2023 (Oct 4, 2023)

Modified

Jun 17, 2026

Description

Cross-site Scripting (XSS) reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response.

Vendors: acilia
Products: widestand
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.