CASAP Automated Enrollment Cross-Site Scripting Vulnerability (CNVD-2021-57787)

CASAP Automated Enrollment is an automated enrollment system from the CASAP organization. The goal of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easily retrievable. SourceCodester CASAP Automated...

PT-2021-17400

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the class name parameter to "update class.php" API endpoint. This enables attackers to perfor...