Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-4492

Easy Address Book Web Server XSS vulnerability

Description

Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip) of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to run when the application is loaded

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EFS Software Easy Address Book Web Server

Default version status: unaffected

  • 1.6affected

References