Stored Cross-Site Scripting Vulnerability in PHPJabbers Cleaning Business Software

CVE-2023-51328

What is CVE-2023-51328?

PHPJabbers Cleaning Business Software v1.0 is susceptible to multiple stored Cross-Site Scripting (XSS) attacks through the 'c_name' and 'name' parameters. This vulnerability enables attackers to inject malicious scripts that are stored on the server and executed when a user accesses the affected parameters. Such an exploit can lead to unauthorized actions, data theft, or further escalation of attacks on users accessing the compromised software.

References