First published: Thu Jul 27 2023(Updated: )
A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Online Fire Reporting System Project Online Fire Reporting System | =1.2 | |
PHPGurukul Online Fire Reporting System | =1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-36941 is a cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2.
CVE-2023-36941 allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the team name, leader, and member fields.
The severity of CVE-2023-36941 is medium with a CVSS score of 6.1.
To fix CVE-2023-36941, update the PHPGurukul Online Fire Reporting System to a version that has addressed the XSS vulnerability.
Yes, you can find references for CVE-2023-36941 at the following links: [Link1], [Link2], [Link3].