CVE-2021-33371

A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...

CVE-2021-33371

CVE-2021-33371 is a stored XSS in Student Management System v1.0 caused by unsanitized input in /nav_bar_action.php (Chat box). Multiple connected sources confirm the vulnerable endpoint and payload injection as the attack vector, leading to execution of arbitrary client-side scripts. Affected so...