medium4.3
CVE-2023-3642
A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic.
Impact
A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/ of the component HTTP POST Request Handler. The manipulation of the argument username/title/comment leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233888.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gzscripts | Vacation Rental Website | Version 1.8 |