MEDIUM🇵🇱 Wersja polska

CVE-2023-1013

CVSS 6.1v3.1pub. 2023-03-30upd. 2026-06-01

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Virames Vira-Investing allows Cross-Site Scripting (XSS). This issue affects Vira-Investing: before 1.0.84.86.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Dizayn Vira Investing
APP
Dizayn
< 1.0.84.86

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

Tags

XSS

CWE

CWE-80

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-…

www.usom.gov.tr/bildirim/tr-23-0183…

Related vulnerabilities

CVE-2023-1014HIGH7.5ten sam produkt

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allo...

CVE-2023-1013

Dizayn Vira Investing

Related vulnerabilities