Cross-Site Scripting (XSS) Vulnerability in Customer Support System v1

CVE-2023-49971

What is CVE-2023-49971?

A serious cross-site scripting (XSS) vulnerability has been identified in the Customer Support System, allowing unauthorized attackers to inject and execute arbitrary web scripts or HTML code. This vulnerability is exploited through the firstname parameter, specifically at the endpoint /customer_support/index.php?page=customer_list. Users accessing the affected system may be susceptible to phishing attacks or other malicious activities as attackers can deliver harmful scripts that compromise user data integrity and system security.

References