CVE-2023-51843

HIGH

react-dashboard 1.4.0 - XSS

Title source: llm

react-dashboard 1.4.0 is vulnerable to Cross Site Scripting (XSS) as httpOnly is not set.

Core 3

Core References

Product

Issue Tracking

Third Party Advisory

CVSS v3 8.2

EPSS 0.0010

EPSS Percentile 27.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-79

Status published

Products (1)

flatlogic/react_dashboard 1.4.0

Published Jan 30, 2024

Tracked Since Feb 18, 2026