CVE-2023-3944: phpscriptpoint Lawyer page.php cross site scripting
A vulnerability was found in phpscriptpoint Lawyer 1.6 and classified as problematic. Affected by this issue is some unknown functionality of the file page.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235400. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-3944?
CVE-2023-3944 is classified as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2023-3944?
To fix CVE-2023-3944, ensure that you validate and sanitize user inputs in the affected page.php file.
Which versions are affected by CVE-2023-3944?
CVE-2023-3944 affects version 1.6 of phpscriptpoint Lawyer.
Can CVE-2023-3944 be exploited remotely?
Yes, CVE-2023-3944 can be exploited remotely through vulnerabilities in the web application's functionality.
What type of vulnerability is CVE-2023-3944?
CVE-2023-3944 is a cross-site scripting (XSS) vulnerability.