CVE-2023-4843 | BDVDB-2026-211486 Detail
PegasystemsPega Platform
Description#
Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only be modified by an authenticated administrative user.
Impact#
CAPEC-137 Parameter Injection
Weaknesses#
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.