PT-2022-12347
CVE-2021-45416
·
تاريخ النشر
2022-02-01
·
تاريخ التحديث
2022-02-04
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
RosarioSIS version 8.2.1
Description
A Reflected Cross-site scripting (XSS) issue allows attackers to inject arbitrary HTML via the
search term parameter in the "modules/Scheduling/Courses.php" script.Recommendations
For RosarioSIS version 8.2.1, avoid using the
search term parameter in the affected script until the issue is resolved. Consider restricting access to the modules/Scheduling/Courses.php script to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾