PT-2019-13790

Name of the Vulnerable Software and Affected Versions Open-School version 3.0 Community Edition version 2.3 Description The issue allows for XSS via the "osv/index.php?r=students/guardians/create" API endpoint, specifically through the id parameter. Recommendations For Open-School version 3.0,...

CVE-2019-14696: Improper Neutralization of Input During Web Page Generation

Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter...