CVE-2023-37684

MediumCVSS 4.8

Published: 08/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the Admin portal. This allows an attacker to inject malicious scripts into the victim's browser.

Risk Assessment

An attacker can exploit this vulnerability to steal the administrator's session, take over the account, or perform unauthorized actions, compromising data confidentiality and integrity.

Recommendation

Immediately update the system to the latest version or apply a security patch. Additionally, implement input filtering and encoding in the report search function.

Original NVD description (English source)

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the Admin portal.