CVE-2023-33408
Published
CVSS v3
5.4
MEDIUM
CVSS v2
N/A
Affected
2
PROJECTS
Description
Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exists due to insufficient input validation in the application's user input handling in the security_helper.php file.
Minical is an open-source PMS with extension management baked-in. It's designed for the companies looking for highly customizable property management software.
GitHub