CVE-2023-2853

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.0190%

EPSS Percentile17.12th

PublishedJul 10, 2023

Last ModifiedMay 22, 2026

Vulnerability Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Softmed SelfPatron allows Reflected XSS. This issue affects SelfPatron : before 2.0.

Affected Platforms (CPE)

📦

Softmedyazilim

Selfpatron

< 2.0

References & Advisories

🔗 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0388

🔗 https://www.usom.gov.tr/bildirim/tr-23-0388

Related Vulnerabilities

CVE-2023-28529.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Softmed SelfPatron allows SQ...

CVE-2023-30459.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tise Technology Parking Web ...

CVE-2023-15479.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL In...

CVE-2023-29579.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lisa Software Florist Site a...