phpshe Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in phpshe version 1.8. The issue arises in the file api.php, specifically within the cron module, where the act parameter is not properly sanitized before being output to the HTML page. This vulnerability allows attackers to execute malicious scripts in the context of the user's browser, potentially stealing cookies or other sensitive information.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.