CVE-2023-34650

MediumCVSS 6.1

Published: 28/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

35th percentile - higher than 35% of all known CVEs

Summary

PHPgurukl Small CRM version 1.0 is vulnerable to Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious JavaScript code in the context of the user's browser.

Risk Assessment

Exploitation of this vulnerability may lead to theft of user data or session hijacking. Organizations should be aware of the security risks associated with web applications.

Recommendation

It is recommended to update to the latest version of PHPgurukl Small CRM and implement appropriate security measures against XSS attacks.

Original NVD description (English source)

PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS).