Cross site scripting

2023-08-2117:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

zerowdd studentmanager

remote attacker

arbitrary code execution

username parameter

student list function

nvd

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function.

CPENameOperatorVersion
studentmanagereq1.0

CPE	Name	Operator	Version
	studentmanager	eq	1.0

References

github.com/ZeroWdd/studentmanager/issues/12