Lucene search

K
osvGoogleOSV:GHSA-6VC5-V7HW-H5H2
HistoryFeb 10, 2022 - 10:26 p.m.

Cross-site Scripting in RosarioSIS

2022-02-1022:26:10
Google
osv.dev
6
rosariosis
cross-site scripting
notifyparents.php
addstudents.php
user.php
software

EPSS

0.001

Percentile

43.8%

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php.

EPSS

0.001

Percentile

43.8%

Related for OSV:GHSA-6VC5-V7HW-H5H2