Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-14046
HistoryMar 14, 2024 - 12:00 a.m.

Scholars Tracking System Cross-Site Scripting Vulnerability

2024-03-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
scholars tracking system
cross-site scripting
vulnerability
fabian ros
filtering
escaping
user-supplied data
attacker
arbitrary web script
html
payload
cnvd

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a cross-site scripting vulnerability that stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted payload.

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for CNVD-2024-14046