CVE Catalog
CVE-2023-34648
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.39%
31th percentile - higher than 31% of all known CVEs
Summary
A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the signup.php.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and potential takeover of user accounts.
Recommendation
It is recommended to update the system to the latest version and implement appropriate input filtering and validation in forms.
Original NVD description (English source)
A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the signup.php.