CVE-2023-43193: Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the forum that leads to XSS.

PriorityP424medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.47%

37.1th percentile

Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the forum that leads to XSS.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
rcos	submitty	< 22.06.00	22.06.00

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.