JLex GuestBook Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in JLex GuestBook version 1.6.4. The issue resides in the 'q' URL parameter, allowing attackers to inject malicious scripts. Exploitation of this vulnerability could lead to the theft of session tokens or the execution of arbitrary JavaScript in the browsers of affected users.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a link to a victim that includes a payload in the 'q' URL parameter. When the victim clicks the link, the injected script will execute in their browser.