Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting (XSS) on the profile.php page via fullname parameter.
References
Configurations
History
21 Nov 2024, 08:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47446%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20Stored%20XSS%20Vulnerability.md - Exploit, Vendor Advisory |
20 Nov 2023, 18:40
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| References | () https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47446%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20Stored%20XSS%20Vulnerability.md - Exploit, Vendor Advisory | |
| CPE | cpe:2.3:a:phpgurukul:pre-school_enrollment_system:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| First Time |
Phpgurukul
Phpgurukul pre-school Enrollment System |
15 Nov 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-15 06:15
Updated : 2024-11-21 08:30
NVD link : CVE-2023-47446
Mitre link : CVE-2023-47446
CVE.ORG link : CVE-2023-47446
JSON object : View
Products Affected
phpgurukul
- pre-school_enrollment_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')