medium6.1
CVE-2024-35352
A vulnerability has been discovered in Diño Physics School Assistant version 2.3.
Impact
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.php?f=save. Manipulating the parameter middlename results in cross-site scripting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dino Physics School Assistant Project | Dino Physics School Assistant | Version 2.3 |