Cross site scripting

2023-01-2019:15:00

PRIOn knowledge base

www.prio-n.com

xss

vulnerability

classroombookings

arbitrary code

input bgcol

weeks.php

nvd

0.001 Low

EPSS

Percentile

32.8%

JSON

Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php.

CPENameOperatorVersion
classroombookingseq2.6.4

CPE	Name	Operator	Version
	classroombookings	eq	2.6.4

References

gist.github.com/enferas/bd8ec37999c216eceabd6b80d5a95f94

github.com/craigrodway/classroombookings/issues/52

0.001 Low

EPSS

Percentile

32.8%

JSON

Related for PRION:CVE-2023-23012