PT-2025-51300
CVE-2023-53882
·
Published
2025-12-15
·
Updated
2025-12-21
Description by
CVSS 4.0
5.1
MediumMetricsAV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Name of the Vulnerable Software and Affected Versions
JLex GuestBook version 1.6.4
Description
The software contains a reflected cross-site scripting issue in the
q URL parameter. This allows attackers to inject malicious scripts. Attackers can create malicious links with XSS payloads to potentially steal session tokens or execute arbitrary JavaScript in a victim’s browser.Recommendations
Update JLex GuestBook to a newer version that addresses this issue. As a temporary workaround, sanitize the
q URL parameter to prevent the injection of malicious scripts.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾