CVE-2023-7050

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability has been found in PHPGurukul Online Notes Sharing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file user/profile.php. The manipulation of the argument name/email leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-248737 was assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
PHPGurukul	Online Notes Sharing System	1.0

References

https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/note_sharing_storedxss..mdExploit
https://vuldb.com/?ctiid.248737Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.248737Third Party Advisory, VDB Entry
https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/note_sharing_storedxss..mdExploit
https://vuldb.com/?ctiid.248737Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.248737Third Party Advisory, VDB Entry

Timeline

Published: Dec 21, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-70514.3A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0 and classified as problematic. Affected by this issue is some unknow CVE-2023-70524.3A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been classified as problematic. This affects an unknown part CVE-2023-70538.8A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been declared as problematic. This vulnerability affects unk CVE-2023-70545.4A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue affects some unknown p CVE-2023-70555.4A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of t CVE-2023-70565.4A vulnerability classified as problematic was found in code-projects Faculty Management System 1.0. Affected by this vulnerability is an unk CVE-2023-70576.1A vulnerability, which was classified as problematic, has been found in code-projects Faculty Management System 1.0. Affected by this issue CVE-2023-70589.8A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as critical. Affected by this vulnera CVE-2023-70595.4A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some CVE-2023-70607.5Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or CVE-2023-70618.8The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 2.5.CVE-2023-70628.8The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4. Th