Cross-Site Scripting Vulnerability in Online Nurse Hiring System by Php Gurukul
CVE-2023-37686

4.8MEDIUM

Key Information:

Vendor
PHPgurukul
Status
Online Nurse Hiring System
Vendor
CVE Published:
8 August 2023

Summary

The Online Nurse Hiring System v1.0 is vulnerable to cross-site scripting (XSS) attacks via the Add Nurse Page in the Admin portal. This flaw allows attackers to inject malicious scripts into web pages viewed by other users, potentially leading to data theft or unauthorized actions. Proper validation and sanitization of user inputs are crucial to mitigating such risks and ensuring the security of sensitive information.

References

http://phpgurukul.com
http://online.com
https://phpgurukul.com/online-nurse-hiring-system-using-p...

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.