Cross-Site Scripting Vulnerability in Online Nurse Hiring System by Online
CVE-2023-37685

4.8MEDIUM

Key Information:

Vendor

PHPgurukul
Status
Online Nurse Hiring System
Vendor
CVE Published:
8 August 2023

What is CVE-2023-37685?

The Online Nurse Hiring System v1.0 is susceptible to a cross-site scripting (XSS) vulnerability located in the Search Report Page of the Admin portal. This flaw allows attackers to inject malicious scripts into web pages viewed by other users, potentially leading to data theft and unauthorized actions within the application. Effective mitigation strategies must be employed to safeguard user interactions and protect sensitive information from exploitation.

References

http://phpgurukul.com
http://online.com
https://phpgurukul.com/online-nurse-hiring-system-using-p...

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.