PT-2023-25524 · Phpjabbers · Phpjabbers Document Creator
CVE-2023-36309
·
Publicado
2023-08-10
·
Atualizado
2023-08-11
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
PHPJabbers Document Creator version 1.0
Description
There is a Cross Site Scripting (XSS) issue in the
action parameter of "index.php" in PHPJabbers Document Creator. This allows for potential malicious script execution.Recommendations
For PHPJabbers Document Creator version 1.0, consider restricting access to the "index.php" file or validating and sanitizing the
action parameter to prevent XSS attacks. As a temporary workaround, avoid using the action parameter in the affected endpoint until the issue is resolved.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phpjabbers Document Creator