CVE-2024-54395

Name of the Vulnerable Software and Affected Versions: Becky Sanders Increase Sociability versions prior to 1.3.0

Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting (XSS). This enables attackers to inject malicious scripts into web pages.

Recommendations: For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation. Avoid using potentially vulnerable input parameters until the issue is resolved.