CVE-2021-30111

Name of the Vulnerable Software and Affected Versions Web-School ERP version 5.0

Description A stored XSS issue exists via the Add Events feature in the event name and description fields, allowing an attack to inject JavaScript code that will be stored and executed when visitors view the events.

Recommendations For Web-School ERP version 5.0, consider disabling the Add Events feature until a patch is available to prevent the injection of malicious JavaScript code. Restrict access to the event name and description fields to minimize the risk of exploitation.