CVE-2023-2692 is a cross-site scripting (XSS) vulnerability affecting SourceCodester ICT Laboratory Management System 1.0. Specifically, it resides in the views/room_info.php file, where manipulating the 'name' GET parameter allows for remote XSS. This vulnerability has a CVSS score of 6.1 (Medium), indicating it can be exploited over the network with low attack complexity, requiring user interaction, and potentially leading to low impact on confidentiality and integrity. While the exploit has been publicly disclosed, there is no evidence of active exploitation (KEV list), no known Metasploit or Nuclei modules, and minimal community discussion or media coverage, suggesting low current attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:ict_laboratory_management_system_project:ict_laboratory_management_system:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.