CVE-2024-53365 is a stored XSS vulnerability in PHPGURUKUL Vehicle Parking Management System v1.13. It occurs in the /users/profile.php page where authenticated users can inject malicious JavaScript code into the profile name field. This code can then be executed in the context of other users viewing the affected profile, leading to potential information disclosure or session hijacking. The vulnerability requires authentication and user interaction (UI:R), with low attack complexity and partial impact on confidentiality and integrity.

Successful exploitation allows an authenticated user to inject persistent malicious scripts into profile names, which execute when other users view the profile. This can lead to partial confidentiality and integrity compromise, such as theft of session tokens or manipulation of displayed data. There is no impact on availability. No known exploits in the wild have been reported.

No official patch or fix has been provided yet for this vulnerability. Users should monitor the vendor's advisories for updates. In the meantime, applying input validation and output encoding on the profile name field can help mitigate the risk. Restricting profile editing to trusted users and limiting the use of scripts in user inputs are recommended temporary measures.