CVE-2023-3311

Summary

CVE-2023-3311 is a newly disclosed vulnerability affecting the PuneethReddyHC online-shopping-system-advanced version 1.0. The issue lies in an unspecified part of the file "addsuppliers.php," which can be exploited through manipulation of the "First name" argument. This cross-site scripting (XSS) vulnerability allows attackers to inject malicious code into web pages viewed by other users, potentially leading to serious security breaches. The exploit has been made public, increasing the risk of remote attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.