CVE-2020-27409 - OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter

MEDIUM

OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter

Published Dec 4, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 1.19%

OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19920		Advisory
https://github.com/OS4ED/openSIS-Responsive-Design/commit/edca0855e7bc27d5b28dcb2d16f057ada865e282#diff-5f88e2ce4cd96451df7580911120b4b2		x_refsource_MISCPatchThird Party Advisory
https://github.com/OS4ED/openSIS-Responsive-Design/compare/ver7.4...V7.5		x_refsource_MISCThird Party Advisory
https://insinuator.net/2020/10/opensis-vulnerabilities/		x_refsource_MISCThird Party Advisory