CVE-2023-48172

Summary

CVE-2023-48172 is a newly identified Cross-Site Scripting (XSS) vulnerability affecting Shuttle Booking Software version 2.0. An attacker can exploit this flaw by injecting malicious JavaScript code via the name, description, title, or address parameter in index.php. Successful exploitation of this vulnerability could result in unauthorized access to user sessions or data theft. Users should upgrade to the latest version of the software or apply the vendor-provided patch to mitigate this risk. It is recommended to implement input validation and output encoding to prevent such attacks in the future.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.