CVE-2023-3559

CVE-2023-3559 affects GZ Scripts PHP GZ Appointment Scheduling Script 1.8. The vulnerability is in the /load.php endpoint, where manipulating parameters first_name, second_name, phone, address_1, or country enables cross-site scripting. Attacks can be launched remotely. Public references (VDB-233...

CVE-2023-3559: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in GZ Scripts PHP GZ Appointment Scheduling Script 1.8. Affected by this vulnerability is an unknown functionality of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting...