medium6.1
CVE-2023-41448
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID paramete…
Impact
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpkobo | Ajaxnewsticker | Version 1.0.5 |