CVE-2023-3830

LowCVSS 3.5

Published: 22/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile — higher than 23% of all known CVEs

Summary

A vulnerability was found in Bug Finder SASS BILLER 1.0, rated as problematic. This issue affects some unknown processing of the file /company/store, leading to cross-site scripting attacks.

Risk Assessment

An attacker may remotely exploit this vulnerability, posing a risk of application takeover or user data theft.

Recommendation

It is recommended to update to the latest version of the software and monitor logs for potential attack attempts.

Original NVD description (English source)

A vulnerability was found in Bug Finder SASS BILLER 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /company/store. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-235151. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.