Cross-Site Scripting Vulnerability in Hostel Management System by Packetstorm Security
CVE-2023-36939

6.1MEDIUM

Key Information:

Vendor
PHPgurukul
Status
Hostel Management System
Vendor
CVE Published:
10 July 2023

Summary

The Hostel Management System v2.1 has a Cross-Site Scripting (XSS) vulnerability that can be exploited by attackers through a specifically crafted payload in the search booking field. This flaw allows for the execution of arbitrary code, potentially compromising the security and integrity of the system. System administrators are urged to address this vulnerability promptly to safeguard against potential exploitation.

References

https://packetstormsecurity.com
https://medium.com/%40ridheshgohil1092/cve-2023-36939-xss...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.