Unknown · Xenv S-Mall-Ssm · CVE-2023-26912
**Name of the Vulnerable Software and Affected Versions**
xenv S-mall-ssm versions thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71
**Description**
A cross site scripting (XSS) issue allows local attackers to execute arbitrary code via the evaluate button. This enables attackers to perform actions on the affected system.
**Recommendations**
For xenv S-mall-ssm versions thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71, consider disabling the evaluate button as a temporary workaround until a patch is available. Restrict access to the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.