3 matches found
CVE-2023-38882
A reflected cross-site scripting XSS vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'include' parameter in 'ForExport.php'...
CVE-2023-38882
CVE-2023-38882 is a reflected cross-site scripting (XSS) vulnerability in Open Solutions For Education OpenSIS Classic Community Edition v9.0. The issue arises from unvalidated input in the include parameter of ForExport.php, allowing an attacker to craft a payload that executes arbitrary JavaScr...
CVE-2023-38882
A reflected cross-site scripting XSS vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'include' parameter in 'ForExport.php'...