CVE-2023-49987

A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

CVE-2023-49987

A cross-site scripting (XSS) vulnerability exists in the School Fees Management System v1.0 within the /management/term component (specifically the "new_term" functionality). The root cause is the improper neutralization of input during web page generation, which allows an attacker to execute arb...