Interzen Consulting ZenShare Suite Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Interzen Consulting S.r.l ZenShare Suite version 17.0. This vulnerability exists in the login_newpwd.php endpoint, where attackers can execute arbitrary JavaScript in the context of the user's browser. The exploitation is achieved by injecting a crafted URL into the codice_azienda parameter.

Impact

Exploitation of this vulnerability allows for the execution of arbitrary JavaScript in the victim's browser, potentially leading to unauthorized actions or data exposure.