CVE-2023-46026

2023-11-1400:00:00

mitre

github.com

cve-2023-46026

cross site scripting

profile.php

phpgurukul

AI Score

6.2

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Cross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the ‘adminname’ and ‘email’ parameters.

References

github.com/ersinerenler/phpgurukul-Teacher-Subject-Allocation-Management-System-1.0/blob/main/CVE-2023-46026-PHPGurukul-Teacher-Subject-Allocation-Management-System-1.0-Stored-Cross-Site-Scripting-Vulnerability.md