CVE-2023-23012
Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impact...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web gist.github.com