CVE-2023-49974

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customersupport/index.php?page=customerlist...

CVE-2023-49974

Customer Support System v1 is vulnerable to a stored cross-site scripting (XSS) vulnerability due to the application's lack of effective filtering and escaping of user-supplied data. An attacker can inject a crafted payload into the contact field or parameter when creating or editing a customer. ...