medium4.7
CVE-2023-49986
A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts…
Impact
A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oretnom23 | School Fees Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/geraldoalcantara/CVE-2023-49986
- https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html
- https://github.com/geraldoalcantara/CVE-2023-49986
- https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html