TI-2023-26717 CVE-2023-49028 · GHSA-233r-fmgw-36jrCross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a…Priority LOW 26Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file.CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00838 · Published 2023-11-27 · No fix listed CWE-79