CVE-2023-3588

5.4 mediumEPSS 0.3%

Medium (5.4) in 3ds teamwork cloud no magic release. EPSS 0.3% chance of exploitation in the next 30 days.

A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

3ds:teamwork_cloud_no_magic_release

References

https://www.3ds.com/vulnerability/advisories
https://www.3ds.com/vulnerability/advisories

Check your stack JSON