CVE-2023-23208

6.1 mediumEPSS 0.4%

Medium (6.1) in genesys administrator extension. EPSS 0.4% chance of exploitation in the next 30 days.

Genesys Administrator Extension (GAX) before 9.0.105.15 is vulnerable to Cross Site Scripting (XSS) via the Business Structure page of the iWD plugin, aka GAX-11261.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-08-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

genesys:administrator_extension

References

https://docs.genesys.com/Documentation/RN/9.0.x/gax90rn/gax9010515
https://docs.genesys.com/Documentation/RN/9.0.x/gax90rn/gax9010515

Check your stack JSON