CVE-2023-36118

MediumCVSS 5.4

Published: 01/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.69%

48th percentile - higher than 48% of all known CVEs

Summary

A Cross Site Scripting vulnerability in the Faculty Evaluation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the page parameter.

Risk Assessment

This vulnerability could lead to the compromise of the application and the theft of user data, posing a significant security risk to the organization.

Recommendation

It is recommended to update the Faculty Evaluation System to the latest version that addresses this vulnerability and to implement proper input sanitization filters.

Original NVD description (English source)

Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the page parameter.