EUVD-2023-58706

Malicious code in bioql PyPI...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file app\content\cls\api.cls.php of the component Content Section Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

CVE-2023-6472

PHPEMS 7.0 contains a Cross-Site Scripting (XSS) flaw in the Content Section Handler, specifically in the file app\content\cls\api.cls.php. The issue is executable remotely and the exploit has been disclosed publicly, with multiple sources confirming the affected component and path. Practical imp...