School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting

School Dormitory Management System 1.0 contains an authenticated cross-site scripting vulnerability in admin/inc/navigation.php:126. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-base...

CVE-2022-30514

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:126...

CVE-2022-30514

creationtimestamp| type| source ---|---|--- 2022-06-02 18:38:56+00:00| seen| https://t.me/cibsecurity/43717...

CVE-2022-30514

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:126...

CVE-2022-30514

School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting XSS via admin/inc/navigation.php:126...

CVE-2022-30514

The provided connected documents confirm a concrete vulnerability: School Dormitory Management System 1.0 has an authenticated cross-site scripting (XSS) flaw in admin/inc/navigation.php:126. Exploitation involves injecting arbitrary script that runs in an authenticated user’s browser, enabling c...