cve/2023/CVE-2023-25309.md

CVE-2023-25309

Description

Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui version 0.5, allows attackers to execute arbitrary code via a crafted url to the delete a feature functionality.

POC

Reference

• https://cxsecurity.com/issue/WLB-2023050012
• https://packetstormsecurity.com/files/172185/Rollout-UI-0.5-Cross-Site-Scripting.html

Github

No PoCs found on GitHub currently.