Cross-Site Scripting Vulnerability in Jorani by Benjamin BALET

CVE-2022-34133

What is CVE-2022-34133?

Jorani v1.0, a web application developed by Benjamin BALET, is susceptible to a cross-site scripting (XSS) vulnerability. This security flaw allows attackers to inject malicious scripts into web pages viewed by users. Specifically, the vulnerability is triggered via the Comment parameter in the application/controllers/Leaves.php file. Successful exploitation of this weakness could lead to stolen session tokens, compromised user accounts, or other malicious actions, highlighting the critical importance of implementing security best practices in web development.

References