CoreCVE
Back

MEDIUM

A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters

Published Feb 9, 2023

Description

A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Feb 9, 2023
Updated Mar 24, 2025
Reserved Jan 23, 2023
Link CVE-2023-24322

CISA Vulnrichment

Updated Mar 24, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2023-24322

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Feb 9, 2023
Updated Mar 24, 2025
Link EUVD-2023-28378

GitHub

No data