CVE-2023-26953 - onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module

MEDIUM

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module

Published Mar 7, 2023

4.8

MEDIUM

CVSS 3.1

EPSS 0.46%

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-30744		Advisory
https://github.com/keheying/onekeyadmin/issues/8		Exploit

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Mar 7, 2023

Updated Mar 4, 2025

Reserved Feb 27, 2023

Updated Mar 4, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Mar 7, 2023

Updated Mar 4, 2025

Exploited since n/a