### [CVE-2023-37531](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37531) ![](https://img.shields.io/static/v1?label=Product&message=BigFix%20Platform&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=%3D%209.5%20-%209.5.23%2C%2010%20-%2010.0.10%20&color=brighgreen) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen) ### Description A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code into a form field of a webpage by a user with privileged access. ### POC #### Reference No PoCs from references. #### Github - https://github.com/kaje11/CVEs