Lucene search
+L

3 matches found

attackerkb
attackerkb
•added 2023/11/20 7:15 p.m.•10 views

CVE-2023-38882

A reflected cross-site scripting XSS vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'include' parameter in 'ForExport.php'...

6.1CVSS6AI score0.00631EPSS
SaveExploits0References4
CVE
CVE
•added 2023/11/20 12:00 a.m.•51 views

CVE-2023-38882

CVE-2023-38882 is a reflected cross-site scripting (XSS) vulnerability in Open Solutions For Education OpenSIS Classic Community Edition v9.0. The issue arises from unvalidated input in the include parameter of ForExport.php, allowing an attacker to craft a payload that executes arbitrary JavaScr...

6.1CVSS6AI score0.00631EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2023/11/20 12:00 a.m.•36 views

CVE-2023-38882

A reflected cross-site scripting XSS vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'include' parameter in 'ForExport.php'...

6.1AI score
SaveExploits0References5
Rows per page
Query Builder