Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-6420
HistoryNov 30, 2023 - 2:15 p.m.

Design/Logic Flaw

2023-11-3014:15:00
PRIOn knowledge base
www.prio-n.com
4
vulnerability
voovi social networking script
xss
emailadd parameter
remote attacker
javascript payload

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.4%

A vulnerability has been reported in Voovi Social Networking Script version 1.0 that allows a XSS via

signup2.php in the emailadd parameter, the exploitation of which could allow a remote attacker to send a specially crafted JavaScript payload and partially take over the browser session of an authenticated user.

CPENameOperatorVersion
voovieq1.0

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.4%

Related for PRION:CVE-2023-6420