CVE-2023-3559

CVE-2023-3559 affects GZ Scripts PHP GZ Appointment Scheduling Script 1.8. The vulnerability is in the /load.php endpoint, where manipulating parameters first_name, second_name, phone, address_1, or country enables cross-site scripting. Attacks can be launched remotely. Public references (VDB-233...