CVE-2024-13023

LOW

PHPGurukul Maid Hiring Management System 1.0 - XSS

Title source: llm
STIX 2.1

Description

A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/search-maid.php of the component Search Maid Page. The manipulation of the argument searchdata leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.289714
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.289714
Exploit, Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.470461
Product product
https://phpgurukul.com/

Scores

CVSS v3 2.4
EPSS 0.0010
EPSS Percentile 26.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-94 CWE-79
Status published
Products (1)
phpgurukul/maid_hiring_management_system 1.0
Published Dec 29, 2024
Tracked Since Feb 18, 2026