CVE-2023-7132

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the file /user_registration/ of the component User Registration. The manipulation of the argument userName/firstName/lastName/userEmail with the input "><ScRiPt>confirm(document.domain)</ScRiPt>h0la leads to cross site scripting. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249135.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Dec 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-71336.1A vulnerability was found in y_project RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the fileCVE-2023-71349.8A vulnerability was found in SourceCodester Medicine Tracking System 1.0. It has been rated as critical. This issue affects some unknown proCVE-2023-71355.4A vulnerability classified as problematic has been found in code-projects Record Management System 1.0. Affected is an unknown function of tCVE-2023-71365.4A vulnerability classified as problematic was found in code-projects Record Management System 1.0. Affected by this vulnerability is an unknCVE-2023-71378.8A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. Affected by this issue is someCVE-2023-71388.8A vulnerability, which was classified as critical, was found in code-projects Client Details System 1.0. This affects an unknown part of theCVE-2023-71399.8A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown CVE-2023-71409.8A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processiCVE-2023-71419.8A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown functionCVE-2023-71429.8A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability isCVE-2023-71434.8A vulnerability was found in code-projects Client Details System 1.0. It has been rated as problematic. Affected by this issue is some unknoCVE-2023-71449.8A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/
CVE-2023-7132: Medium severity, CVSS 5.4 | Vulnix