CVE-2023-37745
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2023-37745 is a newly discovered cross-site scripting (XSS) vulnerability that affects the Maid Hiring Management System version 1.0. This issue permits attackers to inject arbitrary web scripts or HTML code into the Page Description section of the /admin/aboutus.php component. Successful exploitation of this vulnerability could lead to unintended execution of malicious code in users' browsers, potentially resulting in data theft or unauthorized access to sensitive information. It is crucial that users of this system upgrade to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.