Stored Cross-Site Scripting in Art Gallery Management System by PHP Gurukul
CVE-2023-23157

5.4MEDIUM

Key Information:

Vendor

PHPgurukul
Status
Art Gallery Management System
Vendor
CVE Published:
27 February 2023

What is CVE-2023-23157?

The Art Gallery Management System v1.0 by PHP Gurukul contains a stored cross-site scripting vulnerability that allows attackers to insert malicious scripts through the fullname parameter in the enquiry page. This flaw may result in the execution of arbitrary HTML or JavaScript code when a user accesses the compromised page, potentially leading to session hijacking, data theft, or other web-based attacks.

References

https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip
https://phpgurukul.com/art-gallery-management-system-usin...
https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-23...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.