Unknown · Neomind Fusion Platform · CVE-2023-4534
**Name of the Vulnerable Software and Affected Versions**
NeoMind Fusion Platform versions up to 20230731
**Description**
A problematic issue was found in the NeoMind Fusion Platform, affecting an unknown function of the file /fusion/portal/action/Link. The manipulation of the `link` argument leads to cross-site scripting. It is possible to launch the attack remotely. The issue has been disclosed to the public and may be used.
**Recommendations**
For NeoMind Fusion Platform versions up to 20230731, as a temporary workaround, consider restricting access to the `/fusion/portal/action/Link` endpoint until a patch is available. Avoid using the `link` argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.