CVE-2023-46026

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
4.8MEDIUM
EPSS
0.1%
top 65.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Teacher Subject Allocation Management System
Timeline
PublishedNov 14
Latest updateNov 15

Description

Cross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NExploitability: 1.7 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-96mc-c729-8jqq: Cross Site Scripting (XSS) vulnerability in profile↗2023-11-15
▶
CVEList
CVE-2023-46026: Cross Site Scripting (XSS) vulnerability in profile↗2023-11-14
▶
CVE-2023-46026 (MEDIUM CVSS 4.8) | Cross Site Scripting (XSS) vulnerab | cvebase.io