CVE-2023-36942
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field.
Risk Assessment
This vulnerability may lead to user data theft or session hijacking, posing a serious threat to the application's security and its users.
Recommendation
It is recommended to update the system to the latest version and implement input validation and sanitization for the title field to prevent script injections.
Original NVD description (English source)
A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field.