CVE-2023-36376

MediumCVSS 4.8

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

38th percentile - higher than 38% of all known CVEs

Summary

The Hostel Management System v.2.1 has a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the add course section.

Risk Assessment

This vulnerability could lead to session hijacking or data theft, posing a significant security risk to the organization.

Recommendation

It is recommended to update the system to the latest version and implement input validation in the add course section to prevent script injections.

Original NVD description (English source)

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the add course section.