CVE-2023-33409

Minical 1.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in the file minical/public/application/controllers/settings/company.php. The issue is described across multiple sources as a CSRF path that could allow an attacker to induce the victim to perform unintended actions wit...

CVE-2023-33408

Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...

CVE-2023-33409

Minical 1.0.0 is vulnerable to Cross Site Request Forgery CSRF via minical/public/application/controllers/settings/company.php...

Exploit for Cross-site Scripting in Minical

CVE-2023-33408 Minical 1.0.0 is vulnerable to Stored Cross-Si...