CVE-2023-25295 Information

Description

Cross Site Scripting (XSS) vulnerability in GRN Software Group eVEWA3 Community version 31 through 53 allows attackers to gain escalated privileges via crafted request to login panel.

Reference

http://evewa3.com http://grn.com https://blog.munz4u.de/posts/2023/03/cve-2023-25295-ato-via-rxss-in-evewa3-community/