CVE-2023-36939: XSS
Published Jul 10, 2023
·Updated
Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field.
Affected Software
2 affected components
Hostel Management System Project Hostel Management System=2.1
Phpgurukul Hostel Management System=2.1
Event History
Jul 10, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2023-36939.
2
What is the severity level of CVE-2023-36939?
The severity level of CVE-2023-36939 is medium (6.1).
3
What is the description of the Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1?
The Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code by sending a specially crafted payload to the search booking field.
4
Which software versions are affected by CVE-2023-36939?
Hostel Management System v2.1 and PHPGurukul Hostel Management System v2.1 are affected by CVE-2023-36939.
5
How can I fix CVE-2023-36939?
To fix CVE-2023-36939, apply the latest security patches or updates provided by the software vendor and validate user input to prevent the execution of arbitrary code.