CVE-2023-33591

MediumCVSS 6.1

Published: 21/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in User Registration & Login and User Management System v1.0 via the component /admin/search-result.php.

Risk Assessment

This vulnerability may allow attackers to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.

Recommendation

It is recommended to update the system to the latest version and implement input data filtering to minimize the risk of XSS attacks.

Original NVD description (English source)

User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-result.php.