CVE-2023-37685

34th percentile - higher than 34% of all known CVEs

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin portal. This allows an attacker to inject malicious scripts into the administrator's browser.

An attacker could exploit this vulnerability to steal the administrator's session, take over the account, or perform unauthorized actions in the system, compromising data confidentiality and integrity.

Immediately update the system to the latest version if available, and apply input filtering and encoding on the Search Report Page to prevent script injection.