Cross Site Scripting Vulnerability in Code Projects Hospital Information System
CVE-2023-37070

4.8MEDIUM

Key Information:

Vendor

Code-projects

Status
Hospital Information System
Vendor
CVE Published:
14 August 2023

What is CVE-2023-37070?

The Hospital Information System by Code Projects is susceptible to Cross Site Scripting (XSS), which can be exploited by attackers to inject malicious scripts into web pages viewed by other users. This vulnerability allows for potential unauthorized access to sensitive information, session hijacking, and other malicious activities. It is crucial for users of this system to implement appropriate security measures and stay updated on best practices to mitigate the risks associated with XSS attacks.

References

https://code-projects.org/hospital-information-system-in-...
https://github.com/InfoSecWarrior/Offensive-Payloads/blob...
https://github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-20...

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.