CVE-2023-37685
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin portal. This allows an attacker to inject malicious scripts into the administrator's browser.
Risk Assessment
An attacker could exploit this vulnerability to steal the administrator's session, take over the account, or perform unauthorized actions in the system, compromising data confidentiality and integrity.
Recommendation
Immediately update the system to the latest version if available, and apply input filtering and encoding on the Search Report Page to prevent script injection.
Other vulnerabilities in Online Nurse Hiring System
See all- CVE-2023-37687High
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request of Nurse Page in the Admin portal. This allows an attacker to inject malicious scripts into the page.
- CVE-2023-37686Medium
Online Nurse Hiring System v1.0 was found to have a cross-site scripting (XSS) vulnerability in the Add Nurse page of the Admin portal. An attacker can inject malicious scripts that execute in the administrator's browser.
- CVE-2023-37684Medium
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the Admin portal. This allows an attacker to inject malicious scripts into the victim's browser.
- CVE-2023-37683Medium
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Admin Profile Page. This allows an attacker to inject malicious scripts via unsanitized input.
Original NVD description (English source)
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin portal.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS