CVE-2023-36159

MediumCVSS 6.1

Published: 04/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

40th percentile - higher than 40% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to execute arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page.

Risk Assessment

An attacker can inject malicious scripts, leading to session theft, redirects, or page defacement, compromising data confidentiality and integrity.

Recommendation

Update the system to the latest version and implement input validation and encoding on all form fields.

Original NVD description (English source)

Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page.