Reflected cross-site scripting in francoisjacquet/rosariosis

2021-05-0618:54:48

Google

osv.dev

0.001 Low

EPSS

Percentile

49.7%

JSON

Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System < 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request.

CPENameOperatorVersion
francoisjacquet/rosariosiseq5.0.2
francoisjacquet/rosariosiseq5.9
francoisjacquet/rosariosiseq5.3.1
francoisjacquet/rosariosiseq5.4-beta
francoisjacquet/rosariosiseq5.5.3
francoisjacquet/rosariosiseq5.9.5
francoisjacquet/rosariosiseq5.4.5
francoisjacquet/rosariosiseq5.1.1
francoisjacquet/rosariosiseq5.4.2
francoisjacquet/rosariosiseq6.1

Name	Operator	Version
francoisjacquet/rosariosis	eq	5.0.2
francoisjacquet/rosariosis	eq	5.9
francoisjacquet/rosariosis	eq	5.3.1
francoisjacquet/rosariosis	eq	5.4-beta
francoisjacquet/rosariosis	eq	5.5.3
francoisjacquet/rosariosis	eq	5.9.5
francoisjacquet/rosariosis	eq	5.4.5
francoisjacquet/rosariosis	eq	5.1.1
francoisjacquet/rosariosis	eq	5.4.2
francoisjacquet/rosariosis	eq	6.1