CVE-2023-3562: GZ Scripts PHP CRM Platform index.php cross site scripting
First published: Sat Jul 08 2023(Updated: )
A vulnerability has been found in GZ Scripts PHP CRM Platform 1.8 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument action leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-233356. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gzscripts Php Crm Platform | =1.8 | |
| =1.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-3562?
The severity of CVE-2023-3562 is medium with a CVSS score of 6.1.
How does CVE-2023-3562 affect GZ Scripts PHP CRM Platform 1.8?
CVE-2023-3562 affects GZ Scripts PHP CRM Platform 1.8 by allowing remote attackers to initiate a cross-site scripting attack through the manipulation of the 'action' argument in the '/index.php' file.
How can I fix CVE-2023-3562 in GZ Scripts PHP CRM Platform 1.8?
To fix CVE-2023-3562 in GZ Scripts PHP CRM Platform 1.8, it is recommended to apply the latest security patches or updates provided by the vendor. Additionally, input validation and sanitization measures should be implemented to prevent cross-site scripting vulnerabilities.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-3562?
CVE-2023-3562 is associated with CWE-79, which is the Common Weakness Enumeration ID for Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
Where can I find more information about CVE-2023-3562?
You can find more information about CVE-2023-3562 on the VulDB website using the following links: - [CVE-2023-3562 on VulDB](https://vuldb.com/?id.233356) - [CVE-2023-3562 on VulDB](https://vuldb.com/?ctiid.233356)
- collector/nvd-latest
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/weakness
- agent/severity
- agent/title
- agent/description
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/source
- vendor/gzscripts
- canonical/gzscripts php crm platform
- version/gzscripts php crm platform/1.8