Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-6420 EUVD-2023-58657GHSA-qv9j-8f7x-vcfj

Cross-site Scripting vulnerability in Voovi Social Networking Script

Published Nov 30, 2023 · Updated Jun 3, 2025 · Assigned by INCIBE

Description

A vulnerability has been reported in Voovi Social Networking Script version 1.0 that allows a XSS via

signup2.php in the emailadd parameter, the exploitation of which could allow a remote attacker to send a specially crafted JavaScript payload and partially take over the browser session of an authenticated user.

Affected products

VendorProductAffectedFixed
Voovi Social Networking Script Voovi Social Networking Script 1.0 —

References