Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wcww-7w24-2j6v

Опубликовано: 06 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s browser. Attackers can craft malicious links to steal session cookies or conduct phishing attacks.

PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s browser. Attackers can craft malicious links to steal session cookies or conduct phishing attacks.

EPSS

Процентиль: 51%
0.0028
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
около 1 года назад

PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s browser. Attackers can craft malicious links to steal session cookies or conduct phishing attacks.

EPSS

Процентиль: 51%
0.0028
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79