PT-2023-14970 · Unknown · Online Graduate Tracer System
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Online Graduate Tracer System version 1.0.0
Description
A cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the
name parameter.Recommendations
For Online Graduate Tracer System version 1.0.0, avoid using the
name parameter until the issue is resolved. As a temporary workaround, consider validating and sanitizing all user input to minimize the risk of exploitation.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Online Graduate Tracer System