CVE-2023-36939

MediumCVSS 6.1

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.53%

41th percentile - higher than 41% of all known CVEs

Summary

The Hostel Management System v2.1 has a Cross-Site Scripting (XSS) vulnerability that allows an attacker to execute arbitrary code via a crafted payload in the search booking field.

Risk Assessment

This vulnerability could lead to account takeover and personal data theft, posing a significant security risk to the organization.

Recommendation

It is recommended to update the system to the latest version to mitigate this vulnerability and implement input sanitization filters in the search field.

Original NVD description (English source)

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field.