CVE Catalog
CVE-2023-37070
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk0.54%
41th percentile - higher than 41% of all known CVEs
Summary
Code Projects Hospital Information System version 1.0 is vulnerable to Cross Site Scripting (XSS) attacks. An attacker can exploit this vulnerability to inject malicious code into the application.
Risk Assessment
Exploitation of this vulnerability may lead to user data theft and session hijacking, posing a threat to the security of information within the organization.
Recommendation
It is recommended to update the system to the latest version that addresses this vulnerability and to implement appropriate input sanitization filters.
Original NVD description (English source)
Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS)

