CVE-2023-41343 — Ragic No-Code Database Builder - Stored XSS

CVE-2023-41343

Ragic No-Code Database Builder - Stored XSS PUBLISHED

Description (CNA)

Rogic No-Code Database Builder's file uploading function has insufficient filtering for special characters. A remote attacker with regular user privilege can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.

Affected (CNA)

Vendor / product	Versions
Ragic / No-Code Database Builder	affected All version before patching

CWE

CWE-79

References

https://www.twcert.org.tw/tw/cp-132-7509-5b734-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-7509-5b734-1.html

CISA-ADP

No English description supplied.

No references supplied.