CVE-2025-50363
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php via the name field. The vulnerability allows injection of malicious script through this field.
Risk Assessment
An attacker can execute arbitrary JavaScript in the browser of a user visiting the vulnerable page, potentially leading to session or data theft.
Recommendation
Update the application to a patched version or implement input validation and sanitization for the name field and deploy a CSP.
Other vulnerabilities in Maid Hiring Management System
See all- CVE-2023-37690Medium
Maid Hiring Management System v1.0 has a SQL injection vulnerability in the Search Maid page. Attackers can exploit this flaw to manipulate database queries.
- CVE-2023-37689Medium
A SQL injection vulnerability was discovered in the Booking Request page of Maid Hiring Management System v1.0. It allows an attacker to manipulate database queries.
- CVE-2023-37688Medium
A SQL injection vulnerability was discovered in the Admin page of Maid Hiring Management System v1.0. This allows an attacker to manipulate database queries.
Original NVD description (English source)
Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the name field.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS