Multiple Stored Cross-Site Scripting in PHPJabbers Event Ticketing System

CVE-2023-51306

Summary

The PHPJabbers Event Ticketing System version 1.0 presents vulnerabilities through multiple stored cross-site scripting (XSS) attacks, specifically in the 'name' and 'title' parameters. This flaw allows an attacker to inject malicious scripts, leading to unauthorized access to sensitive user data, session hijacking, and potential compromise of the application’s integrity. Web administrators and users should take immediate action to secure their systems against such vulnerabilities.

References