CVE-2023-4672

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.1970%

EPSS Percentile16.93th

Published2023年12月28日

Last Modified2026年5月21日

Vulnerability Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Talent Software ECOP allows Reflected XSS. This issue affects ECOP: before 32255.

Affected Platforms (CPE)

📦

Talentyazilim

Ecop

= 32255

References & Advisories

🔗 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0737

🔗 https://www.usom.gov.tr/bildirim/tr-23-0737

相關漏洞威脅

CVE-2023-46719.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows ...

CVE-2023-12519.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. This issue ...

CVE-2023-343629.8

MOVEit Transfer SQL Injection vulnerability allows unauthenticated attackers to gain unauthorized access to MOVEit Transfer's data...

CVE-2023-10919.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing ...