CVE-2023-3543

Summary

CVE-2023-3543 is a newly discovered vulnerability in GZ Scripts Availability Booking Calendar PHP version 1.8. The issue, classified as problematic, lies within the file load.php and its HTTP POST Request Handler. Maliciously crafted inputs to the arguments cid/first_name/second_name/address_1/country can lead to Cross-Site Scripting (XSS) attacks, enabling remote code execution. Despite early notice, the vendor has not responded to disclosure attempts, leaving users potentially vulnerable.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.