CVE-2023-36376: XSS
Published Jul 10, 2023
·Updated
Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the add course section.
Affected Software
2 affected components
Hostel Management System Project Hostel Management System=2.1
Phpgurukul Hostel Management System=2.1
Event History
Jul 10, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-36376?
CVE-2023-36376 is a Cross-Site Scripting (XSS) vulnerability in Hostel Management System v.2.1.
2
How does CVE-2023-36376 work?
CVE-2023-36376 allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the add course section.
3
What software is affected by CVE-2023-36376?
Hostel Management System v.2.1 and PHPGurukul Hostel Management System v.2.1 are affected by CVE-2023-36376.
4
What is the severity of CVE-2023-36376?
CVE-2023-36376 has a severity rating of medium (4.8).
5
How can I fix CVE-2023-36376?
To fix CVE-2023-36376, it is recommended to apply the latest patch or update provided by the software vendor.