CVE-2023-36337

Medium CVSS: 6.1

A reflected cross-site scripting (XSS) vulnerability in the component /index.php/cuzh4 of PHP Inventory Management System 1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Vendor

Inventory Management System Project

Product

Inventory Management System

CWE

CWE-79

Yayın Tarihi

2025-12-15 19:16:00

Güncelleme

2026-01-02 12:58:24

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-79 Inventory Management System MEDIUM Inventory Management System Project 2025

Referanslar

https://gist.github.com/nguyenkhanhthuan/f345c8ea0551c10ead197680f2ba9c66 https://github.com/ThuanNguyen115685/Report/blob/main/XSS.md