PT-2023-17455 · Unknown · Campcodes Advanced Online Voting System
CVE-2023-2055
·
Published
2023-04-14
·
Updated
2024-05-17
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Campcodes Advanced Online Voting System version 1.0
Description
A vulnerability has been found in the system, classified as problematic. It affects unknown code of the file /admin/config save.php. The manipulation of the
title argument leads to cross-site scripting. The attack can be initiated remotely.Recommendations
For version 1.0, consider disabling access to the /admin/config save.php file until a patch is available. Restrict the manipulation of the
title argument to minimize the risk of exploitation.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Campcodes Advanced Online Voting System