CyberRota Analysis
AI-GeneratedA Stored XSS vulnerability exists in the GazellePW (GazellePosterWall) application, affecting its forum reward comments feature. This flaw allows remote attackers to inject arbitrary JavaScript through the 'c' parameter, which is subsequently rendered in the data-tooltip attribute and interpreted as HTML, potentially leading to unauthorized actions or data exposure. Organizations using GazellePW should prioritize patching this vulnerability to mitigate risks associated with client-side script execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A Stored XSS vulnerability in forum reward comments in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote attackers to inject arbitrary JavaScript via the c parameter in /forums.php?action=ajax_get_jf which is later rendered in the data-tooltip attribute in /forums.php?action=viewthread and interpreted as HTML by the Tooltipster configuration.