Vulnerabilities > CVE-2023-40674 - Unspecified vulnerability in Getlasso Simple Urls

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

getlasso

NVD

Published: 2023-11-30

Updated: 2024-11-21

Summary

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management allows Stored XSS.This issue affects Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management: from n/a through 118.

Vulnerable Configurations

Part	Description	Count
Application	Getlasso Getlasso Simple Urls - Getlasso Simple Urls 0.9 Getlasso Simple Urls 0.9.1 Getlasso Simple Urls 0.9.2 Getlasso Simple Urls 0.9.3 Getlasso Simple Urls 0.9.4 Getlasso Simple Urls 0.9.5 Getlasso Simple Urls 0.9.6 Getlasso Simple Urls 0.9.7 Getlasso Simple Urls 0.9.8 Getlasso Simple Urls 0.9.9 Getlasso Simple Urls 104 Getlasso Simple Urls 105 Getlasso Simple Urls 106 Getlasso Simple Urls 107 Getlasso Simple Urls 108 Getlasso Simple Urls 109 Getlasso Simple Urls 110 Getlasso Simple Urls 111 Getlasso Simple Urls 112 Getlasso Simple Urls 113 Getlasso Simple Urls 114 Getlasso Simple Urls 115 Getlasso Simple Urls 116 Getlasso Simple Urls 117 Getlasso Simple Urls 118	26

Summary

Vulnerable Configurations

References