CVE-2023-0840

PHPCrazy 1.1.1 is affected by a cross-site scripting vulnerability in admin/admin.php?action=users&mode=info&user=2 caused by unsafely handling the username parameter. The issue can be exploited remotely and, per multiple sources, the exploit has been disclosed publicly. No patch/version fix is d...