CVE-2023-7132

Name of the Vulnerable Software and Affected Versions code-projects Intern Membership Management System version 2.0

Description A vulnerability was found in the code-projects Intern Membership Management System, affecting an unknown part of the file /user registration/ of the component User Registration. The manipulation of the argument userName, firstName, lastName, or userEmail with the input ">h0la leads to cross site scripting.

Recommendations For version 2.0, as a temporary workaround, consider restricting the input for userName, firstName, lastName, and userEmail arguments in the /user registration/ component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.