Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88797
HistorySep 29, 2022 - 12:00 a.m.

ISAMS Cross-Site Scripting Vulnerability

2022-09-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
isams
mis
cross-site scripting

0.001 Low

EPSS

Percentile

22.9%

ISAMS is a 100% web-based MIS from ISAMS that can be accessed from anywhere, with multiple third-party integrations into the online learning platform. version 22.2.3.2 of ISAMS contains a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the title field of its groups, which can be exploited to launch cross-site scripting attack.

CPENameOperatorVersion
isams isams 22.eq2.3.2

0.001 Low

EPSS

Percentile

22.9%

Related for CNVD-2022-88797