CVE-2023-24497

Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploited through the remote_subnet field of the database

• CWE-80

• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1704Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1704Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1704

Published

Jul 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-24491 A vulnerability has been discovered in the Citrix Secure Ac…7.8
• CVE-2023-24492 A vulnerability has been discovered in the Citrix Secure Ac…8.8
• CVE-2023-24493A formula injection vulnerability exists in Tenable.sc due t…5.7
• CVE-2023-24494A stored cross-site scripting (XSS) vulnerability exists in …5.4
• CVE-2023-24495A Server Side Request Forgery (SSRF) vulnerability exists in…6.5
• CVE-2023-24496Cross-site scripting (xss) vulnerabilities exist in the requ…4.7
• CVE-2023-24498An uspecified endpoint in the web server of the switch does …7.5
• CVE-2023-24499Butterfly Button plugin may leave traces of its use on user'…4.6
• CVE-2023-2450The FiboSearch - AJAX Search for WooCommerce plugin for Word…4.4
• CVE-2023-24500Electra Central AC unit – Adjacent attacker may cause the un…6.5
• CVE-2023-24501Electra Central AC unit – Hardcoded Credentials in unspecifi…9.8
• CVE-2023-24502Electra Central AC unit – The unit opens an AP with an easil…6.5