{"cvss":9.8,"datePublished":"2026-03-24T00:00:00Z","dateUpdated":"2026-03-24T00:00:00Z","description":"Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.","dueDate":"","id":"CVE-2023-47253","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"qualitor","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"Qualitor qualitor Improper Neutralization of Special Elements used in a Command","vendor":"Qualitor"}