First published: Thu Feb 20 2025(Updated: )
PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "seat_name, plugin_sms_api_key, plugin_sms_country_code, title, name" parameters.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Php Jabbers Restaurant Booking Script |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-51315 has been assessed with a high severity due to multiple stored cross-site scripting vulnerabilities.
To fix CVE-2023-51315, sanitize and validate all user inputs, especially for the affected parameters before processing.
The affected parameters in CVE-2023-51315 include seat_name, plugin_sms_api_key, plugin_sms_country_code, title, and name.
CVE-2023-51315 specifically affects PHPJabbers Restaurant Booking System v3.0.
Exploitation of CVE-2023-51315 can lead to unauthorized access to user data and potentially allow attackers to execute malicious scripts in the context of users' sessions.