CVE-2023-51802

Name of the Vulnerable Software and Affected Versions Simple Student Attendance System version 1.0

Description A Cross Site Scripting (XSS) issue allows a remote attacker to execute arbitrary code via a crafted payload to the page or class month parameter in the "/php-attendance/attendance report" component. This enables the attacker to perform unauthorized actions on the system.

Recommendations For Simple Student Attendance System version 1.0, as a temporary workaround, consider disabling access to the "/php-attendance/attendance report" component until a patch is available. Restrict input to the page and class month parameters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.