CVE Catalog

CVE-2023-36317

MediumCVSS 4.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.51%

39th percentile - higher than 39% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in Sourcecodester Student Study Center Desk Management System version 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL.

Risk Assessment

Attackers can exploit this vulnerability to take control of the application, potentially leading to user data theft or the introduction of malicious software.

Recommendation

It is recommended to update the system to the latest version that addresses this vulnerability and to implement appropriate filters and protections against XSS attacks.

Original NVD description (English source)

Cross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS