CVE Catalog

CVE-2023-37070

MediumCVSS 4.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.54%

41th percentile - higher than 41% of all known CVEs

Summary

Code Projects Hospital Information System version 1.0 is vulnerable to Cross Site Scripting (XSS) attacks. An attacker can exploit this vulnerability to inject malicious code into the application.

Risk Assessment

Exploitation of this vulnerability may lead to user data theft and session hijacking, posing a threat to the security of information within the organization.

Recommendation

It is recommended to update the system to the latest version that addresses this vulnerability and to implement appropriate input sanitization filters.

Original NVD description (English source)

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS