Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-67487
HistoryJan 26, 2022 - 12:00 a.m.

Student Quarterly Grading System Cross-Site Scripting Vulnerability (CNVD-2022-67487)

2022-01-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
quarterly grading system
carlo montero
version 1.0
cross-site scripting
vulnerability
fullname
username
arbitrary code
attacker
security issue

EPSS

0.001

Percentile

23.9%

Student Quarterly Grading System is a quarterly grading system for students by Carlo Montero, a personal developer. version 1.0 of Student Quarterly Grading System is vulnerable to a cross-site scripting vulnerability, which stems from allowing the fullname and username parameters to to execute arbitrary code to a user page. An attacker could exploit this vulnerability to conduct cross-site scripting attacks.

EPSS

0.001

Percentile

23.9%

Related for CNVD-2022-67487