PT-2023-30981 · Unknown · Appointment Scheduler
CVE-2023-48838
·
Publicado
2023-12-07
·
Atualizado
2023-12-09
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Appointment Scheduler version 3.0
Description
The issue concerns Multiple HTML Injection problems. These issues can be exploited via the
SMS API Key or Default Country Code.Recommendations
For Appointment Scheduler version 3.0, consider disabling the SMS API Key or restricting its use until a patch is available. Additionally, review and secure the Default Country Code configuration to minimize the risk of exploitation.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Appointment Scheduler