CVE-2023-30256

MEDIUM 6.1CVE-2023-30256 · Published 11/05/2023 · updated 17/06/2026

In short

CVE-2023-30256 is a MEDIUM (CVSS 6.1) vulnerability affecting qloapps (webkul).
Chance of exploitation in the next 30 days (EPSS): 9.1%, higher than 95.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
qloapps webkul	`= 1.5.2`	No fix yet

Description

Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create parameters in the AuthController.php file.

References

packetstormsecurity.com/files/172542/Webkul-Qloapps-1.5.2-Cross-Site-Scripting.html
ahrixia/CVE-2023-30256 · Exploit
webkul/hotelcommerce · Product
qloapps.com · Product

More vulnerabilities in qloapps

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

qloapps

webkul

= 1.5.2

No fix yet

More vulnerabilities in qloapps

See all →