Maid Hiring Management System v1.0 XSS via /admin/contactus.php Title Param
CVE-2023-37746 Published on July 13, 2023

A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component.

NVD


Products Associated with CVE-2023-37746

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-37746 are published in these products:

Maidhiringmanagementsystemproject Maid Hiring Management System
 
Anujkumar Maid Hiring Management System
 
PHPGurukul Maid Hiring Management System
 

Exploit Probability

EPSS
0.09%
Percentile
25.44%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.