medium6.5
CVE-2023-49985
A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web s…
Impact
A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oretnom23 | School Fees Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/geraldoalcantara/CVE-2023-49985
- https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html
- https://github.com/geraldoalcantara/CVE-2023-49985
- https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html