Multiple Stored Cross-Site Scripting Vulnerabilities in Car Rental Script by PHPJabbers
CVE-2023-48836

5.4MEDIUM

Key Information:

Vendor
PHPjabbers
Status
Car Rental Script
Vendor
CVE Published:
7 December 2023

Summary

The Car Rental Script 3.0 from PHPJabbers is exposed to multiple stored Cross-Site Scripting (XSS) vulnerabilities. Attackers can exploit this by injecting malicious scripts through various input parameters, including name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, and customer_name. This could allow unauthorized access or manipulation of user data, potentially compromising the integrity and security of the web application.

References

https://www.phpjabbers.com/car-rental-script/
http://packetstormsecurity.com/files/176046

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.