PT-2023-32860
CVE-2023-7059
·
تاريخ النشر
2023-12-22
·
تاريخ التحديث
2024-05-17
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SourceCodester School Visitor Log e-Book version 1.0
Description
A problem was found in the file log-book.php, where the manipulation of the
Full Name argument leads to cross-site scripting. The attack can be launched remotely.Recommendations
For version 1.0, consider restricting the input for the
Full Name argument in the log-book.php file to prevent cross-site scripting attacks. As a temporary workaround, consider validating and sanitizing user input for the Full Name field until a more permanent fix is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾