CVE-2023-36940

Summary

CVE-2023-36940 is a Cross-Site Scripting (XSS) vulnerability affecting the PHPGurukul Online Fire Reporting System, which utilizes PHP and MySQL version 1.2. This issue enables attackers to inject malicious code into the search field, allowing them to execute arbitrary scripts in the context of affected users. Successful exploitation could result in data theft, session hijacking, or other unintended actions. Users are strongly advised to apply the available patch or upgrade to a secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.