CVE-2023-34666

Summary

CVE-2023-34666 is a cross-site scripting (XSS) vulnerability in Phpgurukul Cyber Cafe Management System 1.0, which allows remote attackers to inject arbitrary web script or HTML through the admin username parameter. The affected product is Phpgurukul Cyber Cafe Management System 1.0. To remediate this vulnerability, it is recommended to update to a patched version of the software or apply a security patch provided by the vendor. This vulnerability poses a medium risk to organizations, with a base score of 6.1 out of 10 according to NIST's National Vulnerability Database (NVD). The impact is assessed as low, affecting confidentiality and integrity, but not availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.