CVE Catalog
CVE-2023-40750
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk0.97%
57th percentile - higher than 57% of all known CVEs
Summary
There is a Cross Site Scripting (XSS) vulnerability in the 'action' parameter of index.php in PHPJabbers Yacht Listing Script v1.0.
Risk Assessment
An attacker can exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to validate and sanitize input data in the 'action' parameter and to update the script to the latest version to minimize risk.
Original NVD description (English source)
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0.