A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees before 1.5.0 allows attackers to execute arbitrary web script or HTML via $e->getMessage() error mishandling.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-45957.json"