CVE-2023-37686

Summary

CVE-2023-37686 is a newly identified cross-site scripting (XSS) vulnerability affecting the Add Nurse Page in the Admin portal of the Online Nurse Hiring System v1.0. An attacker could exploit this flaw by injecting malicious scripts into a victim's web browser, potentially stealing sensitive data or taking control of the user's session. This issue poses a significant security risk to users and requires immediate patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.