CVE-2023-36941

published 2023-07-27

CVE-2023-36941: A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
phpgurukul	online_fire_reporting_system	—	—

CWE-79