CVE-2023-51308
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Feb 20, 2025
Updated: Feb 21, 2025
CWE ID 80
Summary
CVE-2023-51308 refers to a vulnerability in PHPJabbers Car Park Booking System version 3.0. This issue allows attackers to inject malicious HTML code into multiple parameters, including "name," "plugin_sms_api_key," "plugin_sms_country_code," "title," and others. Successful exploitation of this vulnerability could result in arbitrary code execution or unauthorized access to user data, posing a significant risk to system security. Users of the affected software are strongly advised to update to a patched version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share