CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

CVE-2023-49977

A stored cross-site scripting (XSS) vulnerability exists in Customer Support System v1 due to the application's lack of effective filtering and escaping of user-supplied data. Attackers can inject a crafted payload into the Address field or parameter when creating or editing a customer. This payl...