Lucene search
China National Vulnerability DatabaseCNVD-2023-62865HistoryJul 31, 2023 - 12:00 a.m.
Availability Booking Calendar PHP Cross Site Scripting Vulnerability
2023-07-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
gz scripts
open source
booking calendar
php
cross-site scripting
version 1.0
index.php
promo_code
user-supplied data
filtering
escaping
attacker
payload
arbitrary web script
html
web security
0.001 Low
EPSS
Percentile
25.1%
Availability Booking Calendar PHP is GZ Scripts open source an availability booking calendar system . Availability Booking Calendar PHP v1.0 version of a cross-site scripting vulnerability , the vulnerability stems from the file index.php parameter promo_code on the user-supplied data lack of effective filtering and escaping , an attacker can exploit the vulnerability by injecting a well-designed payload to execute arbitrary Web script or HTML.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gz scripts availability booking calendar php v | eq | 1.0 |
Related
nvd
nvd
CVE-2023-3969
2023-07-27 12:15:09
cve
cve
CVE-2023-3969
2023-07-27 12:15:09
prion
prion
Cross site scripting
2023-07-27 12:15:00
cvelist
cvelist