Cross Site Scripting Vulnerability in PHPGurukul Maid Hiring Management System
CVE-2024-13013

5.1MEDIUM

Key Information:

Vendor
PHPgurukul
Status
Maid Hiring Management System
Vendor
CVE Published:
29 December 2024

Summary

The PHPGurukul Maid Hiring Management System version 1.0 contains a cross site scripting (XSS) vulnerability in the /admin/contactus.php file, specifically within an unprotected function related to the Contact Us Page. Attackers can exploit this vulnerability by manipulating the 'page title' argument, potentially leading to unauthorized script execution in the user's browser. This issue can be targeted remotely, increasing the risk of exploitation, especially when the exploit has been publicly disclosed. It is crucial for users and administrators of the affected system to apply necessary updates or patches to mitigate this vulnerability.

Affected Version(s)

Maid Hiring Management System 1.0

References

https://vuldb.com/?id.289704
vdb-entrytechnical-description
https://vuldb.com/?ctiid.289704
signaturepermissions-required
https://vuldb.com/?submit.470462
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database

Credit

Havook (VulDB User)
.