Stored Cross-Site Scripting Vulnerability in PHPJabbers Cleaning Business Software
CVE-2023-51328
Currently unrated
Summary
PHPJabbers Cleaning Business Software v1.0 is susceptible to multiple stored Cross-Site Scripting (XSS) attacks through the 'c_name' and 'name' parameters. This vulnerability enables attackers to inject malicious scripts that are stored on the server and executed when a user accesses the affected parameters. Such an exploit can lead to unauthorized actions, data theft, or further escalation of attacks on users accessing the compromised software.
References
Timeline
Vulnerability published
Vulnerability Reserved