CS2-WeaponPaints-Website Cross-Site Scripting Vulnerability

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the CS2-WeaponPaints-Website version 2.1.7. The issue resides in the errorpage.php file, where the $_GET['errorcode'] parameter is not properly validated, allowing unauthorized error codes to be accessed. This lack of validation can be exploited to inject malicious scripts that are executed in the context of the user's browser, potentially leading to information disclosure.

Impact

Exploitation of this vulnerability allows for reflected Cross-Site Scripting, where injected scripts are executed in the user's browser, potentially leading to session hijacking or other malicious actions.