Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-07761
HistoryNov 21, 2022 - 12:00 a.m.

Student Attendance Management System Cross-Site Scripting Vulnerability

2022-11-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
19
cross-site scripting
student attendance
vulnerability
filtering
user-supplied data
classname parameter
createclass.php file
exploitation
security issue

0.001 Low

EPSS

Percentile

34.7%

Student Attendance Management System is a student attendance management system. The vulnerability is caused by the lack of effective filtering and escaping of user-supplied data in the className parameter of the createClass.php file, which can be exploited to cause cross-site scripting attacks.

0.001 Low

EPSS

Percentile

34.7%

Related for CNVD-2023-07761