CVE-2023-43456 (published 2023-09-25T00:00:00)
Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in the /php-spms/admin/?page=user endpoint.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a