medium6.1
CVE-2023-41451
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt paramet…
Impact
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpkobo | Ajaxnewsticker | Version 1.0.5 |