{"id":"CVE-2023-37745","title":"A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML v","published":"2023-07-13T12:15:09.217Z","updated":"2026-06-17T02:08:40.660Z","severity":"medium","cvssScore":6.1,"epss":0.00359,"epssPct":0.30094,"kev":false,"maturity":"none","actionScore":24,"primaryVendor":"phpgurukul","primaryProduct":"maid hiring management system","cweId":"CWE-79","fixAvailable":false,"tags":["pre-auth","rce","xss","remote"],"epssDelta7":0.0005,"summary":"A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Description of the /admin/aboutus.php component.","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvssVersion":"3.1","cvssSource":"nvd-primary","cweName":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","kevAdded":null,"kevDue":null,"kevRansomware":null,"source":"nvd","cna":"mitre","ssvc":{"exploitation":"poc","automatable":"no","impact":"partial"},"sources":{"adp":"2024-11-05T15:47:46.780Z","cna":"2024-11-05T15:47:46.780Z","epss":"2026-11-12","cna_seen":"2026-09-29T11:04:27.280Z"},"cvssCna":null,"hasPatchRef":false,"credits":[],"counts":{"exploitdb":0,"metasploit":0,"nuclei":0,"githubPoc":0},"products":[{"vendor":"phpgurukul","product":"maid hiring management system","cpe":"cpe:2.3:a:phpgurukul:maid_hiring_management_system"}],"references":[{"url":"https://phpgurukul.com/maid-hiring-management-system-using-php-and-mysql/","tags":"Product"}],"exploits":[],"analysis":null,"affectedVersions":[{"vendor":"phpgurukul","product":"maid hiring management system","version":"1.0","vsi":null,"vse":null,"vei":null,"vee":null}],"source_attribution":"NVD (NIST), CVE Program, CISA KEV, FIRST EPSS, OSV. Aggregated by Noroxi."}