CVE-2023-46583 — Cross-site Scripting in Nipah Virus Testing Management System

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 59.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Nipah Virus Testing Management System
Timeline
PublishedOct 25
Latest updateOct 26

Description

Cross-Site Scripting (XSS) vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-crff-6xx5-6mj3: Cross-Site Scripting (XSS) vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v↗2023-10-26
▶
CVEList
CVE-2023-46583: Cross-Site Scripting (XSS) vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v↗2023-10-25
▶
CVE-2023-46583 — Cross-site Scripting | cvebase