A vulnerability was found in smpn1smg absis up to 2017-10-19. It has been classified as problematic. Affected is an unknown function of the file lock/lock.php. The manipulation of the argument user leads to cross site scripting.

This vulnerability is traded as CVE-2023-49028. It is possible to launch the attack remotely. There is no exploit available.