CVE-2023-31298: Sesami Cash Point & Transport Optimizer

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user.

Affected products

• Sesami Cash Point & Transport Optimizer: version 6.3.8.6.718 only

Published 2023-12-29. Last modified 2026-06-17.