XSS Vulnerability in Customer Support System v1 Allows Arbitrary Script Execution
CVE-2023-49973

6.1MEDIUM

Key Information:

Vendor: Customer Support System
Status: Customer Support System
Vendor: CVE Published:; 6 March 2024

🔔 Create Customer Support System Vulnerability Alert

What is CVE-2023-49973?

A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customer_support/index.php?page=customer_list.

References

https://www.sourcecodester.com/php/14587/customer-support...

https://github.com/geraldoalcantara/CVE-2023-49973

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Mar 6, 2024
Vulnerability Reserved
Dec 4, 2023

JSON