CVE-2023-38873
CVE-2023-38873
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the top-level page. Thus, the attacker is "hijacking" clicks meant for their page and routing them to another page, most likely owned by another application, domain, or both.
CVSS 6.5 · Medium · EPSS 0.8%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
gugoan/economizzer Packagist
- Versions
- v0.4-alpha
- v0.8-alpha
- v0.9-beta1
- Affected ranges
- ECOSYSTEM: ≤ 0.9-beta1
No fix published