CVE-2023-33736 — A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter

Back Back to CVE browser

MEDIUM

A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter

Published May 31, 2023

5.4

MEDIUM

CVSS 3.1

EPSS 0.40%

Description

A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.40% 0.00398

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00398

Score over time

2023–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (8 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.40% (0.00398)	31.71th	v5 (v2026.06.15)
Jun 15, 2026	0.40% (0.00398)	31.37th	v5 (v2026.06.15)
Mar 17, 2025	0.18% (0.00179)	37.16th	v4 (v2025.03.14)
Dec 12, 2024	0.06% (0.00056)	25.32th	v3 (v2023.03.01)
Jun 6, 2024	0.06% (0.00056)	23.21th	v3 (v2023.03.01)
Apr 30, 2024	0.05% (0.00053)	19.86th	v3 (v2023.03.01)
Jun 7, 2023	0.04% (0.00045)	11.97th	v3 (v2023.03.01)
Jun 1, 2023	0.04% (0.00043)	7.03th	v3 (v2023.03.01)

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://github.com/advisories/GHSA-p74v-mwvg-8ghp
Advisory
https://github.com/jqhph/dcat-admin/issues/2027
ExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-33736

Link	Providers	Tags
https://github.com/advisories/GHSA-p74v-mwvg-8ghp		Advisory
https://github.com/jqhph/dcat-admin/issues/2027		ExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-33736