CVE-2023-3659

Summary

CVE-2023-3659 is a newly identified vulnerability affecting the SourceCodester AC Repair and Services System 1.0. This issue lies in an unknown functionality of the file admin/?page=user/manage_user, where manipulation of the argument firstname/middlename results in cross-site scripting (XSS). An attacker can exploit this remotely, allowing them to inject malicious scripts into a user's browser and potentially steal sensitive information or take control of their account. The Vulnerability Database has assigned the identifier VDB-234013 to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.