CVE-2023-3562

GZ Scripts PHP CRM Platform 1.8 is affected by CVE-2023-3562. The vulnerability arises from improper handling of the action parameter in /index.php, enabling cross-site scripting. Reports consistently cite remote feasibility via a network vector, with the root cause described as manipulation of a...