CVE-2023-36942

MediumCVSS 6.1

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

38th percentile - higher than 38% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field.

Risk Assessment

This vulnerability may lead to user data theft or session hijacking, posing a serious threat to the application's security and its users.

Recommendation

It is recommended to update the system to the latest version and implement input validation and sanitization for the title field to prevent script injections.

Other vulnerabilities in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2

CVE-2023-36941Medium
A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS