CVE-2023-4115
MediumCVSS 4.3Exploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
A vulnerability in PHP Jabbers Cleaning Business 1.0 allows for cross-site scripting (XSS) attacks through manipulation of the index argument in the /index.php file.
Risk Assessment
An attacker can exploit this vulnerability remotely, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to update to the latest version of the software or implement appropriate security measures to mitigate the risk of an attack.
Original NVD description (English source)
A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. VDB-235962 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.