CVE-2023-6420

Name of the Vulnerable Software and Affected Versions Voovi Social Networking Script version 1.0

Description A vulnerability has been reported that allows a XSS via the "signup2.php" endpoint in the emailadd parameter. The exploitation of this issue could allow a remote attacker to send a specially crafted JavaScript payload and partially take over the browser session of an authenticated user.

Recommendations For Voovi Social Networking Script version 1.0, consider disabling the emailadd parameter in the "signup2.php" endpoint until a patch is available. Restrict access to the "signup2.php" endpoint to minimize the risk of exploitation. Avoid using the emailadd parameter in the affected endpoint until the issue is resolved.