CVE-2023-37745
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Description of the /admin/aboutus.php component.
Risk Assessment
This vulnerability could lead to user data theft or session hijacking, posing a significant security risk to the organization.
Recommendation
It is recommended to update the system to the latest version and implement input filtering and validation to minimize the risk of XSS attacks.
Original NVD description (English source)
A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Description of the /admin/aboutus.php component.