CVE-2021-30111

A stored XSS vulnerability exists in Web-School ERP V 5.0 via Add Events in the event name and description fields. An attack can inject a JavaScript code that will be stored in the page. If any visitor sees the events, then the payload will be executed...

CVE-2021-30111

Web-School ERP 5.0 has a stored XSS vulnerability in the Add Events fields (event name and description). The underlying issue is that injected JavaScript is stored and executed when viewers open the affected events. Exploitation details (payloads, vectors) are not provided in the supplied documen...