cve/CVE-2023-40755.md at b8bb3913ae5ed6689c69f4d953bda7435b2f2da7 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

654 B

Raw Blame History

CVE-2023-40755

Description

There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widget v1.0.

POC

Reference

https://medium.com/@mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f

Github

https://github.com/fkie-cad/nvd-json-data-feeds