RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php.
CPE | Name | Operator | Version |
---|---|---|---|
rosariosis | eq | 2.8.27 | |
rosariosis | eq | 5.6.3 | |
rosariosis | eq | 4.4-beta | |
rosariosis | eq | 2.5.3 | |
rosariosis | eq | 5.0.1 | |
rosariosis | eq | 6.5 | |
rosariosis | eq | 2.9.4 | |
rosariosis | eq | 2.8.21 | |
rosariosis | eq | 5.7.1 | |
rosariosis | eq | 5.4 |