NA

CVE-2023-48903

Published: 21/03/2024 Updated: 21/03/2024

Vulnerability Summary

Stored Cross-Site Scripting (XSS) vulnerability in tramyardg autoexpress 1.3.0, allows remote unauthenticated malicious users to inject arbitrary web script or HTML within parameter "imgType" via in uploadCarImages.php.

Exploits

Tramyardg Autoexpress version 130 suffers from a persistent cross site scripting vulnerability ...