CVE-2023-37683

MediumCVSS 4.8

Published: 08/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Admin Profile Page. This allows an attacker to inject malicious scripts via unsanitized input.

Risk Assessment

An attacker could exploit this vulnerability to steal admin session cookies, take over the account, or perform unauthorized actions, compromising data confidentiality and integrity.

Recommendation

Immediately update the system to the latest version or apply a security patch. Additionally, implement input filtering, validation, and output encoding on the admin profile page.

Original NVD description (English source)

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Profile Page of the Admin.