What’s Vulnerable › Vulnerabilities

CVE-2023-32721: Stored XSS in Maps element

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-10-12 · updated 2026-06-17
Weakness: CWE-20

Description

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.

Affected products

Zabbix: from 4.0.0 through 4.0.47; from 5.0.0 through 5.0.36; from 6.0.0 through 6.0.20; from 6.4.0 through 6.4.5; 7.0.0-alpha1, 7.0.0-alpha2, 7.0.0-alpha3

References

Get alerted when CVE-2023-32721 or the next vulnerability affects your stack