RosarioSis 跨站脚本漏洞

RosarioSis is a free and open source student information system. It is used to manage students, create reports and make the right decisions. A cross-site scripting vulnerability exists in RosarioSIS versions prior to 4.3 that originates in the SanitizeMarkDown function in...

CVE-2021-44566

RosarioSIS contains a Cross-Site Scripting (XSS) vulnerability in the SanitizeMarkDown function (ProgramFunctions/MarkDownHTML.fnc.php) affecting versions before 4.3. The issue is documented in CVE-2021-44566 with an XSS vector via the markdown sanitization routine. Public references corroborate ...