CVE-2023-51281: ORETNOM23 Customer Support System

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters.

Affected products

• ORETNOM23 Customer Support System: version 1.0 only

Published 2024-03-07. Last modified 2026-06-17.