CVE-2023-36939

6.1MEDIUM

Key Information:

Vendor: PHPgurukul
Status: Hostel Management System
Vendor: CVE Published:; 10 July 2023

Summary

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field.

References

https://packetstormsecurity.com

https://medium.com/%40ridheshgohil1092/cve-2023-36939-xss...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Jul 10, 2023
Vulnerability Reserved
Jun 28, 2023

Collectors

NVD DatabaseMitre Database