CVE-2023-3562

Name of the Vulnerable Software and Affected Versions GZ Scripts PHP CRM Platform version 1.8

Description A vulnerability has been found in the GZ Scripts PHP CRM Platform, classified as problematic. This issue affects unknown code of the file /index.php. The manipulation of the action argument leads to cross-site scripting. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Recommendations For GZ Scripts PHP CRM Platform version 1.8, as a temporary workaround, consider restricting access to the /index.php file or disabling the manipulation of the action argument until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.