A vulnerability, which was classified as problematic, was found in Student Information System 1.0. Affected is admin/?page=students of the Student Roll module. The manipulation with the input <script>alert(1)</script> leads to authenticated cross site scripting. Exploit details have been disclosed to the public.
References
Link | Resource |
---|---|
https://vuldb.com/?id.200586 | Third Party Advisory |
https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Student%20Information%20System/SIS_Stored_Cross_Site_Scripting(XSS).md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-05-23 23:15
Updated : 2022-06-02 15:50
NVD link : CVE-2022-1819
Mitre link : CVE-2022-1819
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
student_information_system_project
- student_information_system