CVE-2023-27121
published 2023-10-04CVE-2023-27121: A cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows…
PriorityP335medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
21.27%
97.3th percentile
A cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cronString parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| pleasantsolutions | pleasant_password_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://pleasantpasswords.com/downloadhttps://www.mdsec.co.uk/2023/09/the-not-so-pleasant-password-manager/https://www.nuget.org/packages/CronExpressionDescriptor/2.9.0https://pleasantpasswords.com/downloadhttps://www.mdsec.co.uk/2023/09/the-not-so-pleasant-password-manager/https://www.nuget.org/packages/CronExpressionDescriptor/2.9.0
2023-10-04
Published