CVE-2023-39094

CVE-2023-39094 affects ZeroWdd studentmanager v1.0. The vulnerability is a cross-site scripting flaw in the student list function, exploited through the username parameter. Root cause: unsanitized input leading to script execution in the context of the victim. Documented impact: remote attackers ...

CVE-2023-39094: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

PT-2023-26779

Name of the Vulnerable Software and Affected Versions ZeroWdd studentmanager version 1.0 Description The issue allows a remote attacker to execute arbitrary code via the username parameter in the student list function. This is a Cross Site Scripting vulnerability. Recommendations For ZeroWdd...