GHSA-6VC5-V7HW-H5H2 Cross-site Scripting in RosarioSIS

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

CVE-2020-15721

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

CVE-2020-15721

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

Design/Logic Flaw

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

CVE-2020-15721

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

CVE-2020-15721

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

PT-2020-14608

Name of the Vulnerable Software and Affected Versions RosarioSIS versions prior to 6.8-beta Description The issue is related to a problem with the href attributes for "AddStudents.php" and "User.php" in the NotifyParents.php file within the Custom module, allowing for XSS attacks. Recommendations...

CVE-2020-15721: Improper Neutralization of Input During Web Page Generation

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...