References https://nvd.nist.gov/vuln/detail/CVE-2023-53878 https://www.exploit-db.com/exploits/51710 https://www.vulncheck.com/advisories/member-login-script-client-side-request-desynchronization-vulnerability https://avd.aliyun.com/detail?id=AVD-2023-53878 https://cve.imfht.com/detail/CVE-2023-53878 https://www.phpjabbers.com/member-login-script/ https://cve.scap.org.cn/vulnerability/VHN-340945
Related VulnerabilitiesPoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site ScriptingPoCCVE-2026-41456: Bludit CMS <= 3.20.0 - Cross-Site ScriptingPoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site ScriptingPoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site ScriptingPoCCVE-2022-39258: Mailcow Dockerized Swagger UI - Cross-Site ScriptingPoCCVE-2026-0743: WP Content Permission <= 1.2 - Cross-Site ScriptingPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginFlowise /api/v1/loginmethod 未授权访问漏洞(CVE-2026-56270)PoCCVE-2026-42878: FacturaScripts - Unauthenticated phpinfo DisclosurePoClitellm-default-login: LiteLLM - Default LoginHepta Platforms|Heptabase - Stored Cross-Site ScriptingPoCCVE-2026-12394: WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege EscalationPoCCVE-2026-49069: WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site Scripting