CVE-2023-23015

Cross Site Scripting (XSS) vulnerability in Kalkun 0.8.0 via username input in file User_model.php.

• CWE-79
• CWE-79

• https://gist.github.com/enferas/eaf599190451745f1b339f64cca4a36dVendor Advisory
• https://github.com/kalkun-sms/Kalkun/issues/487Exploit, Issue Tracking, Vendor Advisory
• https://gist.github.com/enferas/eaf599190451745f1b339f64cca4a36dVendor Advisory
• https://github.com/kalkun-sms/Kalkun/issues/487Exploit, Issue Tracking, Vendor Advisory

Published

Jan 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23009Libreswan 4.9 allows remote attackers to cause a denial of s…6.5
• CVE-2023-2301The Contact Form Builder by vcita plugin for WordPress is vu…6.1
• CVE-2023-23010Cross Site Scripting (XSS) vulnerability in Ecommerce-CodeIg…6.1
• CVE-2023-23011Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6…6.1
• CVE-2023-23012Cross Site Scripting (XSS) vulnerability in craigrodway clas…6.1
• CVE-2023-23014Cross Site Scripting (XSS) vulnerability in InventorySystem …6.1
• CVE-2023-23019Cross site scripting (XSS) vulnerability in file main.php in…5.4
• CVE-2023-2302The Contact Form and Calls To Action by vcita plugin for Wor…5.4
• CVE-2023-23021Cross Site Scripting (XSS) vulnerability in sourcecodester o…6.1
• CVE-2023-23022Cross site scripting (XSS) vulnerability in sourcecodester o…6.1
• CVE-2023-23024Book Store Management System v1.0 was discovered to contain …6.1
• CVE-2023-23026Cross site scripting (XSS) vulnerability in sourcecodester o…6.1