CVE-2021-44566

2022-02-2415:15:24

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.6%

JSON

A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 4.3 via the SanitizeMarkDown function in ProgramFunctions/MarkDownHTML.fnc.php.

CPENameOperatorVersion
rosariosiseq2.1.1
rosariosiseq2.8.1
rosariosiseq2.8.8
rosariosiseq2.8.12
rosariosiseq2.8.25
rosariosiseq2.0b.2
rosariosiseq2.8.3
rosariosiseq2.8.16
rosariosiseq1.2
rosariosiseq2.0b3

Name	Operator	Version
rosariosis	eq	2.1.1
rosariosis	eq	2.8.1
rosariosis	eq	2.8.8
rosariosis	eq	2.8.12
rosariosis	eq	2.8.25
rosariosis	eq	2.0b.2
rosariosis	eq	2.8.3
rosariosis	eq	2.8.16
rosariosis	eq	1.2
rosariosis	eq	2.0b3