CVE-2023-31298

MEDIUM 4.8CVE-2023-31298 · Published 29/12/2023 · updated 17/06/2026

In short

CVE-2023-31298 is a MEDIUM (CVSS 4.8) vulnerability affecting cash point & transport optimizer (sesami).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 37.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cash point & transport optimizer sesami	`= 6.3.8.6.718`	No fix yet

Description

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user.

References

herolab.usd.de/en/security-advisories/usd-2022-0060 · Third Party Advisory

More vulnerabilities in cash point & transport optimizer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cash point & transport optimizer

sesami

= 6.3.8.6.718

No fix yet

More vulnerabilities in cash point & transport optimizer

See all →