CVE-2023-2307

This vulnerability allows an attacker to inject malicious code into applications built with the qwik framework, potentially leading to unauthorized access or control over the affected systems. It affects versions prior to 0.21.0, so users running older versions are at risk if they haven't updated.

This vulnerability allows an attacker to inject malicious scripts into web pages viewed by users, potentially stealing sensitive information or performing actions on their behalf. It affects versions of the qwik product before 0.1.0-beta5, and an attacker would need to trick users into visiting a compromised page to exploit it.