CVE-2023-42307

Name of the Vulnerable Software and Affected Versions Code-Projects Exam Form Submission version 1.0

Description A Cross Site Scripting (XSS) issue affects the software, allowing attackers to execute arbitrary code through the Subject Name and Subject Code sections. This enables attackers to run arbitrary code via these sections.

Recommendations For version 1.0, consider disabling the Subject Name and Subject Code sections until a patch is available to prevent exploitation. Restrict access to these sections to minimize the risk of arbitrary code execution. Avoid using the Subject Name and Subject Code fields in the affected sections until the issue is resolved.