CVE-2023-41537
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Aug 30, 2023
Updated: Aug 31, 2023
CWE ID 79
Summary
CVE-2023-41537 is a newly identified Cross Site Scripting (XSS) vulnerability affecting the phpjabbers Business Directory Script version 3.2. Malicious actors can exploit this issue by injecting malicious code into the keyword parameter, potentially allowing them to execute arbitrary scripts in the context of affected users. This can result in unauthorized data access, session hijacking, or other types of attacks. Users are advised to update their phpjabbers Business Directory Script installation to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- PHPJabbers