Cross Site Scripting Vulnerability in PHPJabbers Callback Widget
CVE-2023-36315
6.1MEDIUM
What is CVE-2023-36315?
A Cross Site Scripting (XSS) vulnerability exists in the 'action' parameter of index.php in PHPJabbers Callback Widget v1.0. This flaw allows attackers to inject malicious scripts into web pages viewed by users. Exploiting this vulnerability can lead to data theft, session hijacking, or other unauthorized actions affecting user security and trust. It is crucial for users to update to the latest version to mitigate potential risks and safeguard sensitive information from exploitation.
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved