CVE-2023-5694

Summary

CVE-2023-5694 is a newly disclosed vulnerability affecting the CodeAstro Internet Banking System 1.0. This issue is considered problematic and lies within an unspecified function of the pages_system_settings.php file. An attacker can exploit this cross-site scripting (XSS) flaw by manipulating the sys_name argument with the input <ScRiPt >alert(991)</ScRiPt>. The vulnerability can be exploited remotely, making it a significant security risk. The exploit for this vulnerability has been made public, increasing the potential for widespread attacks. This vulnerability is also tracked under VDB-243132.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.