AutoBib Bibliographic Collection Management System Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in AutoBib Bibliographic Collection Management System versions through 3.1.140. This vulnerability allows attackers to execute arbitrary JavaScript in the context of the victim's browser. Exploitation involves injecting a crafted payload into the WCE=topFrame&WCU= parameter.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute malicious scripts in the context of the user's browser session.

Reproduction

To reproduce this vulnerability, send a request to the application with a payload injected into the WCE=topFrame&WCU= parameter. The injected JavaScript will be executed in the context of the victim's browser.