CVE-2023-24496

Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploited through the name field of the database.

• CWE-80

• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1704Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1704Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1704

Published

Jul 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-24490Users with only access to launch VDA applications can launch…4.3
• CVE-2023-24491 A vulnerability has been discovered in the Citrix Secure Ac…7.8
• CVE-2023-24492 A vulnerability has been discovered in the Citrix Secure Ac…8.8
• CVE-2023-24493A formula injection vulnerability exists in Tenable.sc due t…5.7
• CVE-2023-24494A stored cross-site scripting (XSS) vulnerability exists in …5.4
• CVE-2023-24495A Server Side Request Forgery (SSRF) vulnerability exists in…6.5
• CVE-2023-24497Cross-site scripting (xss) vulnerabilities exist in the requ…4.7
• CVE-2023-24498An uspecified endpoint in the web server of the switch does …7.5
• CVE-2023-24499Butterfly Button plugin may leave traces of its use on user'…4.6
• CVE-2023-2450The FiboSearch - AJAX Search for WooCommerce plugin for Word…4.4
• CVE-2023-24500Electra Central AC unit – Adjacent attacker may cause the un…6.5
• CVE-2023-24501Electra Central AC unit – Hardcoded Credentials in unspecifi…9.8