CVE-2023-34651
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts in the context of the victim's browser.
Risk Assessment
Exploitation of this vulnerability may lead to theft of user data and session hijacking. This poses a threat to patient data security and the organization's reputation.
Recommendation
It is recommended to update the system to the latest version that addresses this vulnerability. Additionally, implementing security mechanisms against XSS, such as input validation and sanitization, is advisable.
Original NVD description (English source)
PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).

