CVE-2023-22985

MediumCVSS 6.1

Published: 06/04/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

Cross-site scripting (XSS) vulnerability in Simple Guestbook Management System 1 allows attackers to inject malicious JavaScript via Name, Referrer, Location, and Comments fields.

Risk Assessment

An attacker can steal user sessions, redirect victims to malicious sites, or perform other unauthorized actions in the victim's browser.

Recommendation

Update the system to the latest version or implement input validation and output encoding for all form fields.

Original NVD description (English source)

Sourcecodester Simple Guestbook Management System version 1 is vulnerable to Cross Site Scripting (XSS) via Name, Referrer, Location, and Comments.