Cross Site Scripting Vulnerability in PHPJabbers Ticket Support Script
CVE-2023-40753
5.4MEDIUM
What is CVE-2023-40753?
A Cross Site Scripting (XSS) vulnerability exists in the message parameter of index.php within PHPJabbers Ticket Support Script version 3.2. This flaw allows an attacker to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized actions and data exposure. Users of this version are urged to apply necessary security measures to mitigate risks associated with this vulnerability.
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved