Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-6420

Cross-site Scripting vulnerability in Voovi Social Networking Script

Description

A vulnerability has been reported in Voovi Social Networking Script version 1.0 that allows a XSS via signup2.php in the emailadd parameter, the exploitation of which could allow a remote attacker to send a specially crafted JavaScript payload and partially take over the browser session of an authenticated user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Voovi Social Networking Script Voovi Social Networking Script

Default version status: unaffected

  • 1.0affected

References