PT-2022-20150

CVE-2022-30513

Published

2022-05-27

Updated

2022-06-10

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions School Dormitory Management System version 1.0

Description The issue is related to reflected cross-site scripting (XSS) in the admin/inc/navigation.php file at line 125. This means an attacker could potentially inject malicious scripts into the website, which would then be executed by the user's browser.

Recommendations For School Dormitory Management System version 1.0, consider disabling access to the admin/inc/navigation.php file until a patch is available to prevent exploitation of the reflected XSS issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Abdulaziz Saad

B4Zb0Z

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers