CVE-2023-48836: XSS
First published: Thu Dec 07 2023(Updated: )
Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, or customer_name parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHPJabbers Car Rental Script | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID associated with this issue?
The vulnerability ID associated with this issue is CVE-2023-48836.
What is the severity of CVE-2023-48836?
The severity of CVE-2023-48836 is medium with a CVSS score of 5.4.
How does the vulnerability CVE-2023-48836 affect Car Rental Script 3.0?
The vulnerability CVE-2023-48836 affects Car Rental Script 3.0 by allowing multiple stored Cross-Site Scripting (XSS) attacks through several parameters.
Which parameters in Car Rental Script 3.0 are affected by CVE-2023-48836?
The parameters affected by CVE-2023-48836 in Car Rental Script 3.0 include name, plugin_sms_api_key, plugin_sms_country_code, calendar_id, title, country name, and customer_name.
Are there any available fixes for CVE-2023-48836?
There may be available fixes for CVE-2023-48836. It is recommended to visit the vendor's website or contact the software provider for more information on fixes or patches.
- collector/nvd-api
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/phpjabbers
- canonical/phpjabbers car rental script
- version/phpjabbers car rental script/3.0