CVE Catalog

CVE-2023-34651

MediumCVSS 6.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.43%

35th percentile - higher than 35% of all known CVEs

Summary

PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts in the context of the victim's browser.

Risk Assessment

Exploitation of this vulnerability may lead to theft of user data and session hijacking. This poses a threat to patient data security and the organization's reputation.

Recommendation

It is recommended to update the system to the latest version that addresses this vulnerability. Additionally, implementing security mechanisms against XSS, such as input validation and sanitization, is advisable.

Original NVD description (English source)

PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS