CVE-2023-4115

Deeper analysis

A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. It affects an unknown function in the file /index.php, where manipulation of the index argument enables cross-site scripting. The issue is remotely exploitable and has been assigned VDB-235962; the vendor was contacted prior to disclosure but did not respond.

An unauthenticated attacker can launch the attack over the network by supplying crafted input to the affected parameter. Successful exploitation requires user interaction and yields limited integrity impact, allowing injection of arbitrary scripts that execute in the victim's browser context.

Public references, including Packet Storm and VulDB entries, document the flaw but contain no vendor patches or mitigation guidance. The EPSS score reached a peak of 0.2032 with a current value of 0.1808, indicating modest post-disclosure interest without evidence of widespread exploitation.