{"id":"CVE-2023-40851","aliases":["EUVD-2023-45391","GHSA-g4j5-f2j8-q53j"],"status":"published","title":"Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration \u0026 Login and User...","description":"Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration \u0026 Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00429,"percentile":0.37537,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2023-10-16T00:00:00Z","modified":"2026-06-17T06:19:44Z","products":[{"vendor":"user_registration_\\\u0026_login_and_user_management_system_with_admin_panel_project","product":"user_registration_\\\u0026_login_and_user_management_system_with_admin_panel"}],"references":[{"url":"https://www.exploit-db.com/exploits/51694","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40851"},{"url":"https://github.com/advisories/GHSA-g4j5-f2j8-q53j"}],"sources":{"cve":[{"id":"CVE-2023-40851","description":"Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration \u0026 Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page.","status":"published","published":"2023-10-16T00:00:00Z","modified":"2024-09-16T19:57:32.261Z","updated_at":"2026-11-02T14:35:21.612665Z"}],"euvd":[{"id":"EUVD-2023-45391","description":"Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration \u0026 Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page.","status":"published","published":"2023-10-16T00:00:00Z","modified":"2024-09-16T19:57:32Z","updated_at":"2026-11-03T00:55:18.167658Z"}],"ghsa":[{"id":"GHSA-g4j5-f2j8-q53j","title":"Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration \u0026 Login and User...","description":"Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration \u0026 Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page.","status":"published","published":"2023-10-16T21:30:27Z","modified":"2024-04-04T08:42:06Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:57:00.717739Z"}],"nvd":[{"id":"CVE-2023-40851","description":"Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration \u0026 Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page.","status":"published","published":"2023-10-16T21:15:10.81Z","modified":"2026-06-17T06:19:44.58Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:08:37.83429Z"}]}}