CVE-2023-3561

Summary

CVE-2023-3561 is a newly identified vulnerability affecting the GZ Hotel Booking Script 1.8 by GZ Scripts PHP. The issue lies in an unknown part of the /load.php file and can be exploited through manipulation of the first_name, second_name, phone, address_1, or country arguments. This cross-site scripting vulnerability allows remote attackers to inject malicious code into a victim's webpage. Despite early disclosure, the vendor, GZ Scripts PHP, has not responded to the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.