CVE-2023-32685

CVE-2023-32685 is a cross-site scripting (XSS) vulnerability affecting Kanboard project management software versions prior to 1.2.29. A low-privileged attacker can inject arbitrary HTML by tricking a victim into pasting malicious clipboard content into a contentEditable element, potentially leading to information disclosure or limited integrity impact if Content Security Policy (CSP) is misconfigured. The vulnerability has a CVSS score of 5.4 (Medium) due to its network attack vector, low attack complexity, and required user interaction. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.