EUVD-2023-27112

Malicious code in bioql PyPI...

CVE-2023-23012: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php...

CVE-2023-23012

Cross Site Scripting XSS vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php...

CVE-2023-23012

Cross Site Scripting XSS vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php...

Craigrodway ClassroomBookings Cross-Site Scripting Vulnerability

Craigrodway Classroombookings is a Php, Mysql based school room booking system by Craigrodway individual developer. A security vulnerability exists in craigrodway classroombookings version 2.6.4. An attacker can exploit this vulnerability to execute arbitrary code via the input bgcol in the...

CVE-2023-23012

The CVE-2023-23012 entry describes an XSS vulnerability in craigrodway classroombookings 2.6.4, exploitable via the bgcol input in Weeks.php. Connected sources corroborate the affected software/version and the impact as described (arbitrary code execution/unspecified impacts) but do not provide c...