Stored Cross-Site Scripting in Art Gallery Management System by PHP Gurukul
CVE-2023-23157
5.4MEDIUM
Key Information:
- Vendor
- PHPgurukul
- Vendor
- CVE Published:
- 27 February 2023
Summary
The Art Gallery Management System v1.0 by PHP Gurukul contains a stored cross-site scripting vulnerability that allows attackers to insert malicious scripts through the fullname parameter in the enquiry page. This flaw may result in the execution of arbitrary HTML or JavaScript code when a user accesses the compromised page, potentially leading to session hijacking, data theft, or other web-based attacks.
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved