CVE-2023-36995 Information

Description

TravianZ through 8.3.4 allows XSS via the Alliance tag/name the statistics page the link preferences the Admin Logs or the COOKUSR cookie.

Reference

https://bramdoessecurity.com/travianz-hacked/