Record summary

CVE-2023-1238 has a selected CVSS score of 5.4 (medium).

Description

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 6, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion rangeStatus
CVE ListBefore 1.0.6affected

github.com/answerdev/answer

Browse Go / github.com/answerdev/answer
GitHub AdvisoryBefore 1.0.6 · Fixed in 1.0.6affected

References

4