Cross Site Scripting Vulnerability in Phpgurukul User Registration System
CVE-2023-40851

5.4MEDIUM

Key Information:

Vendor: User Registration \& Login And User Management System With Admin Panel Project
Status: User Registration \& Login And User Management System With Admin Panel
Vendor: CVE Published:; 16 October 2023

🔔 Create User Registration \& Login And User Management System With Admin Panel Project Vulnerability Alert

What is CVE-2023-40851?

A Cross Site Scripting (XSS) vulnerability exists in the Phpgurukul User Registration & Login System version 3.0. This flaw allows attackers to execute arbitrary scripts through manipulation of the fname, lname, email, and contact fields on the user registration page. Exploiting this vulnerability could result in unauthorized actions on behalf of users, compromising sensitive data and leading to further security breaches. It is crucial for administrators to apply necessary updates and security measures to safeguard against potential attacks.

References

https://www.exploit-db.com/exploits/51694

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 16, 2023
Vulnerability Reserved
Aug 22, 2023

CVE-2023-40851 Data

JSON