CVE-2023-41445

MediumCVSS 6.1

Published: 27/09/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.54%

41th percentile - higher than 41% of all known CVEs

Summary

A Cross Site Scripting (XSS) vulnerability in phpkobo AjaxNewTicker version 1.0.5 allows a remote attacker to execute arbitrary JavaScript code via a crafted payload in the index.php component.

Risk Assessment

An attacker can exploit this vulnerability to steal user sessions, redirect to malicious sites, or steal sensitive data, compromising the confidentiality and integrity of the system.

Recommendation

Immediately update phpkobo AjaxNewTicker to the latest available version and implement input filtering and validation in the index.php component.

Original NVD description (English source)

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component.