CVE-2023-49548

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customer_support/ajax.php?action=save_user.

Affected products

Customer Support System

oretnom23 Customer Support System

= 1.0

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

0.8% (53th percentile)

Weakness

CWE-89

NVD status

Analyzed

Published

2024-03-04