CVE-2023-41471

Description

Cross Site Scripting vulnerability in copyparty v.1.9.1 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function.

PUBLISHED Reserved 2023-08-30 | Published 2025-08-29 | Updated 2025-08-29 | Assigner mitre

References

github.com/...SECURITY/XSS_vuln_issue/blob/main/copyparty.md

github.com/9001/copyparty

cve.org (CVE-2023-41471)

nvd.nist.gov (CVE-2023-41471)

Download JSON