Lucene search
PRIOn knowledge basePRION:CVE-2023-3558HistoryJul 10, 2023 - 4:15 p.m.
Cross site scripting
2023-07-1016:15:00
PRIOn knowledge base
www.prio-n.com
4
vulnerability
gz scripts event booking calendar
remote attacks
argument manipulation
cross site scripting
vendor disclosure
0.0004 Low
EPSS
Percentile
14.2%
A vulnerability classified as problematic has been found in GZ Scripts Event Booking Calendar 1.8. Affected is an unknown function of the file /load.php. The manipulation of the argument first_name/second_name/phone/address_1/country leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-233352. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| event_booking_calendar | eq | 1.8 |
