CVE-2023-0742: Answer

Critical severity, CVSS 9.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.

Affected products

• Answer Answer: before 1.0.4 (fixed in 1.0.4)

Published 2023-02-08. Last modified 2026-06-17.