Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101538
HistoryOct 12, 2021 - 12:00 a.m.

Opensis Cross-Site Scripting Vulnerability (CNVD-2021-101538)

2021-10-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
opensis
version 8.0
cross-site scripting
vulnerability
javascript code
ajax_url_encode.php
injection

EPSS

0.003

Percentile

71.6%

openSIS is a free and open source student information system/school management software. openSIS version 8.0 contains a cross-site scripting vulnerability. An attacker can exploit the vulnerability to inject and execute JavaScript code via the link_url parameter in Ajax_url_encode.php.

EPSS

0.003

Percentile

71.6%

Related for CNVD-2021-101538