CVE-2023-36666

MEDIUM 6.1CVE-2023-36666 · Published 25/06/2023 · updated 17/06/2026

In short

CVE-2023-36666 is a MEDIUM (CVSS 6.1) vulnerability affecting ixp manager (inex).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.3% of all vulnerabilities.
Fix: update to 6.3.1 or later.

Package	Affected versions	Patched versions
ixp manager inex	`< 6.3.1`	`6.3.1`

Description

INEX IXP-Manager before 6.3.1 allows XSS. list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, page-header-preamble.foil.php, overview.foil.php, cust.foil.php, and view.foil.php may be affected.

References

inex/IXP-Manager commit fddbc38 · Patch
inex/IXP-Manager · Patch

More vulnerabilities in ixp manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free