CVE-2023-40751: XSS
First published: Mon Aug 28 2023(Updated: )
PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHPJabbers Fundraising Script | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-40751?
The severity of CVE-2023-40751 is medium.
How does the vulnerability in PHPJabbers Fundraising Script v1.0 occur?
The vulnerability in PHPJabbers Fundraising Script v1.0 occurs due to Cross Site Scripting (XSS) via the "action" parameter of index.php.
How can I fix the vulnerability in PHPJabbers Fundraising Script v1.0?
To fix the vulnerability in PHPJabbers Fundraising Script v1.0, update the software to a patched version provided by PHPJabbers.
What is the Common Weakness Enumeration (CWE) ID of CVE-2023-40751?
The Common Weakness Enumeration (CWE) ID of CVE-2023-40751 is CWE-79.
Where can I find more information about CVE-2023-40751?
You can find more information about CVE-2023-40751 at the following references: [1] [2]
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/phpjabbers
- canonical/phpjabbers fundraising script
- version/phpjabbers fundraising script/1.0