CVE-2023-36375: XSS
First published: Mon Jul 10 2023(Updated: )
Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, Guardian relation, complimentary address, city, permanent address, and city parameters in the Book Hostel & Room Details page.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hostel Management System Project Hostel Management System | =2.1 | |
| PHPGurukul Hostel Management System | =2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-36375?
CVE-2023-36375 is a Cross Site Scripting vulnerability in Hostel Management System v2.1 that allows an attacker to execute arbitrary code.
How does the vulnerability in Hostel Management System v2.1 work?
The vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code by providing a crafted payload to certain parameters in the Book Hostel & Room Details page.
Which parameters are affected by the Cross Site Scripting vulnerability in Hostel Management System v2.1?
The Guardian name, Guardian relation, complimentary address, city, permanent address, and city parameters in the Book Hostel & Room Details page are affected by the Cross Site Scripting vulnerability in Hostel Management System v2.1.
What is the severity of CVE-2023-36375?
CVE-2023-36375 has a severity rating of medium with a score of 5.4.
How can I fix the Cross Site Scripting vulnerability in Hostel Management System v2.1?
To fix the Cross Site Scripting vulnerability in Hostel Management System v2.1, it is recommended to apply the latest security patches or updates provided by the software vendor.
- collector/nvd-latest
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/weakness
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- vendor/hostel management system project
- canonical/hostel management system project hostel management system
- version/hostel management system project hostel management system/2.1
- vendor/phpgurukul
- canonical/phpgurukul hostel management system
- version/phpgurukul hostel management system/2.1