CVE-2023-5303
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Sep 30, 2023
Updated: May 17, 2024
CWE ID 79
Summary
CVE-2023-5303: A problematic cross-site scripting (XSS) vulnerability was identified in the Online Banquet Booking System 1.0. The affected component is the Account Detail Handler, specifically the file /view-booking-detail.php. An attacker can exploit this vulnerability by manipulating the argument "username" leading to XSS injection. The attack can be launched remotely. VDB-240942 has been assigned to this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share