CVE-2012-3840

Name of the Vulnerable Software and Affected Versions MyClientBase version 0.12

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the first name or last name parameters in the "index.php/users/form/user id" API endpoint.

Recommendations For MyClientBase version 0.12, as a temporary workaround, consider restricting input for the first name and last name parameters in the "index.php/users/form/user id" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.