CVE-2023-6767

Summary

CVE-2023-6767 is a newly identified vulnerability affecting the SourceCodester Wedding Guest e-Book 1.0. The issue lies within the /endpoint/add-guest.php file, where a cross-site scripting (XSS) vulnerability has been discovered. An attacker can exploit this weakness by manipulating the argument name, potentially leading to code injection. This vulnerability is considered problematic, as it can be triggered remotely, allowing unauthorized users to execute malicious scripts on unsuspecting victims' web browsers. The associated identifier for this security flaw is VDB-247899.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.