AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-4090

MEDIUM · CVSS 5.4 EPSS 0.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-10-04 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.4. It affects Java.

CVE
CVE-2023-4090
Severity
MEDIUM
CVSS
5.4
EPSS
0.31%
Java

Original NVD Description

Cross-site Scripting (XSS) reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response.