CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

Github Security Blog•added 2022/02/10 10:26 p.m.•33 views

Cross-site Scripting in RosarioSIS

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

6.1CVSS5.9AI score0.00432EPSS

Exploits0References5Affected Software1

OSV•added 2022/02/10 10:26 p.m.•14 views

GHSA-6VC5-V7HW-H5H2 Cross-site Scripting in RosarioSIS

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

6.1CVSS6.1AI score0.00432EPSS

Exploits0References4

NVD•added 2020/07/14 3:15 p.m.•12 views

CVE-2020-15721

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

6.1CVSS0.00432EPSS

Exploits0References3

OSV•added 2020/07/14 3:15 p.m.•10 views

CVE-2020-15721

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

6.1CVSS6.2AI score

Exploits0References3

Prion•added 2020/07/14 3:15 p.m.•12 views

Design/Logic Flaw

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

4.3CVSS6AI score0.00432EPSS

Exploits0References3Affected Software1

CVE•added 2020/07/14 2:26 p.m.•51 views

CVE-2020-15721

CVE-2020-15721 affects RosarioSIS up to 6.8-beta. A cross-site scripting (XSS) issue is caused by the href attributes in modules/Custom/NotifyParents.php affecting AddStudents.php and User.php. The connected documents do not provide a patch version, workaround, or explicit exploitation details. N...

6.1CVSS6AI score0.00432EPSS

Exploits0References3Affected Software1