Skip to content
OpenAdvisories
Low · 2.4 CVE-2023-6472 EUVD-2023-58706GHSA-wqp3-26m2-8cfv

PHPEMS Content Section api.cls.php cross site scripting

Published Dec 2, 2023 · Updated Aug 2, 2024 · Assigned by VulDB

Description

A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file app\content\cls\api.cls.php of the component Content Section Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-246629 was assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
— PHPEMS 7.0 —

References