CVE-2023-3588: Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-09-13 · updated 2026-06-17
Weakness: CWE-79

Description

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.

Affected products

3Ds Teamwork Cloud No Magic Release: 2021x, 2022x

References

https://www.3ds.com/vulnerability/advisories
https://www.3ds.com/vulnerability/advisories

Get alerted when CVE-2023-3588 or the next vulnerability affects your stack