CVE-2023-46948

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-23 · updated 2026-07-05
Weakness: CWE-79

Description

A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbitrary JavaScript code via the skin parameter in the about.jsp and genrequest.jsp components.

Affected products

Temenos T24: r19.40

References

https://github.com/AzraelsBlade/CVE-2023-46948

Get alerted when CVE-2023-46948 or the next vulnerability affects your stack