CVE-2025-5984

The CVE-2025-5984 entry concerns SourceCodester Online Student Clearance System v1.0. Concrete details across connected documents show a cross-site scripting flaw in the /Admin/add-fee.php script, triggered by manipulating the txtamt parameter. Exploitation is described as remote and publicly dis...

CVE-2025-5984 SourceCodester Online Student Clearance System add-fee.php cross site scripting

A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be...

CVE-2025-5984: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Online Student Clearance System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/add-fee.php. The manipulation of the argument txtamt leads to cross site scripting. The attack can be...

CVE-2022-43142

A cross-site scripting XSS vulnerability in the add-fee.php component of Password Storage Application v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

CVE-2022-43142: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the add-fee.php component of Password Storage Application v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

PT-2022-26772 · Unknown · Password Storage Application

Name of the Vulnerable Software and Affected Versions: Password Storage Application version 1.0 Description: A cross-site scripting XSS vulnerability in the add-fee.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

CVE-2022-43079: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...