← Back

Qad

qad

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Search Server
search_server
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-45471
1Qad
1Search Server
Jun 17, 2026
Oct 20, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The QAD Search Server is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to, and including, 1.0.0.315 due to insufficient checks on indexes. This makes it possible for unauthenticated attackers to create a...Show more
The QAD Search Server is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to, and including, 1.0.0.315 due to insufficient checks on indexes. This makes it possible for unauthenticated attackers to create a new index and inject a malicious web script into its name, that will execute whenever a user accesses the search page.Show less