CVE-2022-4053 - Student Attendance Management System createClass.php cross site scripting

Back Back to CVE browser

MEDIUM

Student Attendance Management System createClass.php cross site scripting

Published Nov 17, 2022

4.8

MEDIUM

CVSS 3.1

EPSS 0.46%

Description

A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function of the file createClass.php. The manipulation of the argument className leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-213846 is the identifier assigned to this vulnerability.

Affected products

Vendor n/a Product Student Attendance Management System Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Student Attendance Management System

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-707

CWE-79

Cross-site Scripting (XSS)

References (2)

https://github.com/rickxy/Student-Attendance-Management-System/issues/3
ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.213846
Third Party AdvisoryVDB Entry

Link	Providers	Tags
https://github.com/rickxy/Student-Attendance-Management-System/issues/3		ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.213846		Third Party AdvisoryVDB Entry