Output Messenger Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Output Messenger versions prior to 2.0.63. This vulnerability allows unsanitized user input to be injected into the web application's response, where it is reflected back to the browser without proper encoding. As a result, attackers can execute arbitrary JavaScript in the context of the victim's session, potentially leading to session hijacking, phishing attacks, or other client-side exploits.

Impact

Exploitation of this vulnerability allows for the injection and execution of arbitrary JavaScript in the victim's browser, with potential consequences such as session hijacking, theft of sensitive information, or other malicious actions carried out in the context of the user's session.

Remediation

Users are advised to upgrade to Output Messenger version 2.0.63, where this vulnerability has been fixed.