CVE-2023-6366

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. It is possible for an attacker to craft a XSS payload and store that value within Alert Center.   If a WhatsUp Gold user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victims browser.

• CWE-79
• CWE-79

• https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-December-2023Vendor Advisory
• https://www.progress.com/network-monitoringProduct
• https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-December-2023Vendor Advisory
• https://www.progress.com/network-monitoringProduct

Published

Dec 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6360The 'My Calendar' WordPress Plugin, version < 3.4.22 is affe…9.8
• CVE-2023-6361A vulnerability has been discovered in Winhex affecting vers…7.3
• CVE-2023-6362A vulnerability has been discovered in Winhex affecting vers…7.3
• CVE-2023-6363Use After Free vulnerability in Arm Ltd Valhall GPU Kernel D…5.1
• CVE-2023-6364In WhatsUp Gold versions released before 2023.1, a stored cr…5.4
• CVE-2023-6365 In WhatsUp Gold versions released before 2023.1, a stored c…5.4
• CVE-2023-6367 In WhatsUp Gold versions released before 2023.1, a stored c…5.4
• CVE-2023-6368In WhatsUp Gold versions released before 2023.1, an API endp…5.3
• CVE-2023-6369The Export WP Page to Static HTML/CSS plugin for WordPress i…5.4
• CVE-2023-6371An issue has been discovered in GitLab CE/EE affecting all v…5.4
• CVE-2023-6373The ArtPlacer Widget WordPress plugin before 2.20.7 does not…8.8
• CVE-2023-6374Authentication Bypass by Capture-replay vulnerability in Mit…7.5