← back
CVE-2023-2259criticalCWE-1336

Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 1.1%
exploitation probability
1.1%top 38% of all CVEs
observed exploitation
nono source reports it
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H