KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS)

Reflective Cross Site Scripting XSS vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APPHOST parameter at config/i18n/en/main.php. id: CVE-2023-49489 info: name: KodeExplorer 4.51 - Reflective Cross Site Scripting XSS...

CVE-2023-49489

Affected software: KodExplorer 4.51. Vulnerability: Reflective Cross-Site Scripting (XSS) via the APP_HOST parameter in config/i18n/en/main.php. Attackers can obtain sensitive information and escalate privileges according to the Nuclei/Nuclei templates entry; no exploitation details beyond that a...