CVE-2023-37746
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component.
Risk Assessment
This vulnerability could lead to user data theft or session hijacking, posing a serious threat to the application's security and personal data.
Recommendation
It is recommended to validate and sanitize input data in the Title parameter and to update the system to the latest version to minimize the risk of XSS attacks.
Original NVD description (English source)
A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component.