CVE-2022-3072 Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis

Cross-site Scripting XSS - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3...

CVE-2022-3072

CVE-2022-3072 is a stored XSS vulnerability in RosarioSIS prior to version 8.9.3. Multiple connected records corroborate this issue, citing that the vulnerability exists in RosarioSIS’s upload functionality and that newer versions (8.9.3+) resolve it. Affected software is RosarioSIS (student info...