CVE-2023-36940

MediumCVSS 4.8

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

39th percentile - higher than 39% of all known CVEs

Summary

The PHPGurukul Online Fire Reporting System version 1.2 has a Cross Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload injected into the search field.

Risk Assessment

This vulnerability could lead to the compromise of the application and theft of user data, posing a significant security risk to the organization.

Recommendation

It is recommended to update the system to the latest version and implement input data filtering to prevent XSS injections.

Original NVD description (English source)

Cross Site Scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field.