{ "id": "CVE-2023-23756", "sourceIdentifier": "security@joomla.org", "published": "2023-07-11T20:15:10.573", "lastModified": "2023-07-12T12:46:41.413", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements." } ], "metrics": {}, "weaknesses": [ { "source": "security@joomla.org", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-79" } ] } ], "references": [ { "url": "https://extensions.joomla.org/vulnerable-extensions/vulnerable/one-vote-1-7-xss-cross-site-scripting/", "source": "security@joomla.org" } ] }