CVE-2023-37686
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
Online Nurse Hiring System v1.0 was found to have a cross-site scripting (XSS) vulnerability in the Add Nurse page of the Admin portal. An attacker can inject malicious scripts that execute in the administrator's browser.
Risk Assessment
The risk includes potential session hijacking, account takeover, or unauthorized actions within the system. This could lead to patient data leakage and compromise system integrity.
Recommendation
Immediately update the system to the latest version or apply a patch that fixes the XSS vulnerability. As a workaround, validate and sanitize all input on the Add Nurse page.
Original NVD description (English source)
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Nurse Page in the Admin portal.