drkbcn/lblfixer_cve_2023_28447

PoC

Module for PrestaShop 1.7.X to fix CVE-2023-28447 vulnerability (Smarty XSS)

view exploit source poc_in_githubauthor drkbcnpublished 2023-03-30catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-28447US	medium6.1	1.02% (63rd)	Exploit	2023-03-28
Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScri…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.