Vulnerability Details CVE-2023-30256
Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create parameters in the AuthController.php file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.778
EPSS Ranking 98.9%
CVSS Severity
CVSS v3 Score 6.1
References
- http://packetstormsecurity.com/files/172542/Webkul-Qloapps-1.5.2-Cross-Site-Scripting.html
- https://github.com/ahrixia/CVE-2023-30256
- https://github.com/webkul/hotelcommerce
- https://qloapps.com/
- http://packetstormsecurity.com/files/172542/Webkul-Qloapps-1.5.2-Cross-Site-Scripting.html
- https://github.com/ahrixia/CVE-2023-30256
- https://github.com/webkul/hotelcommerce
- https://qloapps.com/