CVE-2023-6419 (published 2023-11-30T13:17:24.799Z)
A vulnerability has been reported in Voovi Social Networking Script version 1.0 that allows a XSS via editprofile.php in multiple parameters, the exploitation of which could allow a remote attacker to send a specially crafted JavaScript payload and partially take over the browser session of an authenticated user.
Affected products: Vendor: Voovi Social Networking Script
Product: Voovi Social Networking Script
Versions: 1.0