Cross Site Scripting Vulnerability in Code-Projects Exam Form Submission
CVE-2023-42308

6.1MEDIUM

Key Information:

Vendor

Code-Projects

Status
Exam Form Submission
Vendor
CVE Published:
12 March 2024

What is CVE-2023-42308?

The vulnerability identified within Code-Projects Exam Form Submission 1.0 involves a Cross Site Scripting (XSS) flaw that can be exploited through the 'Subject Name' and 'Subject Code' sections. This weakness enables attackers to inject and execute arbitrary code, potentially compromising the integrity of user data and the overall security of the application. Organizations using this software are recommended to assess their exposure to this vulnerability and implement measures to safeguard their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/ASR511-OO7/CVE-2023-42308/blob/main/CVE-7

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.