Approved changes feed: RSS · Atom

cpe:2.3:a:gzscripts:vacation_rental_website:1.8:*:*:*:*:*:*:*

part: a version: 1.8 update: *

VendorGzscripts (4084ff1d-67ee-5d4d-8642-a612661e9d40)
ProductVacation Rental Website (12e32326-f1d9-52cb-9067-833be2be05e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3642 vulnerable 2026-06-03 14:52:41.395398 GZ Scripts Vacation Rental Website HTTP POST Request cross site scripting
MEDIUM (4.3)
A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/ of the component HTTP POST Request Handler. The manipulation of the argument username/title/comment leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233888.
Published: 2023-07-12T17:00:03.821Z
Updated: 2024-10-22T17:58:16.015Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.