CVE-2023-3858

Summary

CVE-2023-3858 is a recently identified vulnerability affecting the phpscriptpoint Car Listing 1.6 software. The issue lies within the /search.php file and involves a cross-site scripting (XSS) flaw. Manipulation of the country/state/city arguments triggers the vulnerability, enabling remote attackers to inject malicious scripts. Despite early disclosure to the vendor, no response has been received from them regarding this issue, and the identifier VDB-235210 has been assigned to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.