CVE-2023-39094

2023-08-2100:00:00

mitre

www.cve.org

zerowdd

studentmanager

xss

vulnerability

username parameter

remote attacker

arbitrary code

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function.

References

github.com/ZeroWdd/studentmanager/issues/12