What’s Vulnerable › Vulnerabilities

CVE-2023-50609

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-06 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scripting (XSS) vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute arbitrary code via a crafted script to ajax.aspx.

Affected products

• Ava Teaching Video Application Service Platform: 3.1

References

• https://gist.github.com/zhishituboshu/f8f07e9df411b1ee3d8212a166b2034e
• https://gist.github.com/zhishituboshu/f8f07e9df411b1ee3d8212a166b2034e

Get alerted when CVE-2023-50609 or the next vulnerability affects your stack