CVE Catalog

CVE-2023-37744

MediumCVSS 6.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

23th percentile - higher than 23% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was discovered in Maid Hiring Management System v1.0 via the component /admin/search-booking-request.php.

Risk Assessment

Exploitation of this vulnerability could lead to session hijacking or injection of malicious code, posing a threat to the application's security and user data.

Recommendation

It is recommended to update the system to the latest version and implement proper input filtering and validation to minimize XSS risk.

Original NVD description (English source)

Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-booking-request.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS