CVE-2023-36376

4.8MEDIUM

Key Information:

Vendor: PHPgurukul
Status: Hostel Management System
Vendor: CVE Published:; 10 July 2023

Summary

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the add course section.

References

https://packetstormsecurity.com

https://medium.com/%40ridheshgohil1092/cve-2023-36376-xss...

CVSS V3.1

Score:

4.8

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Jul 10, 2023
Vulnerability Reserved
Jun 21, 2023

Collectors

NVD DatabaseMitre Database