Cross site scripting

2022-07-2714:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

21.6%

JSON

Sims v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter.

CPENameOperatorVersion
student_information_management_systemeq1.0

CPE	Name	Operator	Version
	student_information_management_system	eq	1.0

References

cwe.mitre.org/data/definitions/79.html

github.com/rawchen/sims/issues/8

0.001 Low

EPSS

Percentile

21.6%

JSON

Related for PRION:CVE-2022-34550