Cross site scripting

2023-11-2019:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

reflected

vulnerability

community edition

version 9.0

os4ed

opensis classic

remote attackers

arbitrary javascript

web browser

'forexport.php'

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

JSON

A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED’s openSIS Classic allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the ‘include’ parameter in ‘ForExport.php’