medium6.1
CVE-2023-41453
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd paramet…
Impact
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpkobo | Ajaxnewsticker | Version 1.0.5 |