CVE-2022-34550

Sims v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter...

CVE-2022-34550

Sims v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /addNotifyServlet. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notifyInfo parameter...

CVE-2022-34550

The CVE-2022-34550 issue affects Sims v1.0, where a cross-site scripting (XSS) vulnerability exists in the/addNotifyServlet. It allows an attacker to inject arbitrary web scripts/HTML via the notifyInfo parameter, enabling user-facing script execution. The NVD entry lists CVSS v3.1 base metrics (...

Sims 跨站脚本漏洞

Sims is a student information management system by the Chinese individual developer RawChen. A security vulnerability exists in Sims v1.0, which originates from a cross-site scripting XSS vulnerability discovered via the component /addNotifyServlet. An attacker can exploit this vulnerability to...