ACEware Systems ACEweb Online Portal Cross-Site Scripting Vulnerability

ACEware Systems ACEweb Online Portal is a component of the Student Manager solution from ACEware Systems, Inc. A cross-site scripting vulnerability exists in ACEware Systems ACEweb Online Portal version 3.5.065, which originates in person. The txtNmName1 parameter in awp lacks a validation filter for user-supplied data and output data. An attacker could exploit this vulnerability to execute JavaScript code on the client side.