CVE-2019-1010028

CVE-2019-1010028 affects phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier. The vulnerability is a Cross Site Scripting (XSS) issue in the component /pro-school/index.php?student/message/send_reply/ . The attack vector shown is a crafted image tag payload, e.g. . Affected...