CVE-2023-36936

MediumCVSS 6.1

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.57%

43th percentile - higher than 43% of all known CVEs

Summary

The PHPGurukul Online Security Guards Hiring System version 1.0 has a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload in the search booking box.

Risk Assessment

This vulnerability could lead to account takeover and personal data theft, posing a significant security risk to the organization.

Recommendation

It is recommended to update the system to the latest version and implement appropriate input sanitization filters to minimize the risk of XSS attacks.

Original NVD description (English source)

Cross-Site Scripting (XSS) vulnerability in PHPGurukul Online Security Guards Hiring System using PHP and MySQL 1.0 allows attackers to execute arbitrary code via a crafted payload to the search booking box.