CVE-2023-2814

SourceCodester Class Scheduling System 1.0 contains a cross-site scripting vulnerability in the POST Parameter Handler, specifically via the Academic_Rank parameter in /admin/save_teacher.php. The flaw arises from insufficient input filtering/escaping, allowing remote attackers to inject arbitrar...

CVE-2023-2814 SourceCodester Class Scheduling System POST Parameter save_teacher.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/saveteacher.php of the component POST Parameter Handler. The manipulation of the argument AcademicRank leads to cross site scripting. It is...