CVE-2023-45796 — XSS vulnerability in Pilz PASvisu and PMI v8xx

CVE-2023-45796

XSS vulnerability in Pilz PASvisu and PMI v8xx PUBLISHED

Description (CNA)

A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthenticated attacker to manipulate process data with potential impact on integrity and/or availability.

Affected (CNA)

Vendor / product	Versions
Pilz / PMI v8xx	affected 0.0.0 through 2.0.33992
Pilz / PASvisu	affected 0.0.0 before 1.14.1

CWE

CWE-79

References

https://certvde.com/en/advisories/VDE-2023-050/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.