CVE-2023-3642

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/ of the component HTTP POST Request Handler. The manipulation of the argument username/title/comment leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233888.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-364207.8Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-364227.8Microsoft Windows Defender Elevation of Privilege VulnerabilityCVE-2023-364238.8Microsoft Remote Registry Service Remote Code Execution VulnerabilityCVE-2023-364247.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-364258.0Windows Distributed File System (DFS) Remote Code Execution VulnerabilityCVE-2023-364277.0Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2023-364285.5Microsoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityCVE-2023-364296.5Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityCVE-2023-36439.8A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/sCVE-2023-364317.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2023-364336.5Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityCVE-2023-364349.8Windows IIS Server Elevation of Privilege Vulnerability