PT-2025-9914

Name of the Vulnerable Software and Affected Versions huang-yk student-manage version 1.0 Description A problematic issue was found in the Edit a Student Information Page component, allowing for cross-site scripting through the manipulation of the Class argument. This can be initiated remotely...

CVE-2024-13902: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in huang-yk student-manage 1.0. This affects an unknown part of the component Edit a Student Information Page. The manipulation of the argument Class leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2021-24694

The Simple Download Monitor WordPress plugin before 3.9.11 could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attack via 1 "color" or "cssclass" argument of sdmdownload shortcode, 2 "class" or "placeholder" argument of sdmsearchform shortcode...

CVE-1999-0952

Buffer overflow in Solaris lpstat via class argument allows local users to gain root access...