CVE-2023-3642

MEDIO 6.1CVE-2023-3642 · Published 12/07/2023 · updated 17/06/2026

En resumen

CVE-2023-3642 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a vacation rental website (gzscripts).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.45%, mayor que el 39.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
vacation rental website gzscripts	`= 1.8`	No fix yet

Description

A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/ of the component HTTP POST Request Handler. The manipulation of the argument username/title/comment leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233888.

References

vuldb.com · Third Party Advisory
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free