Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-27p6-h842-m2mx

Опубликовано: 14 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/calendar_of_events.php in KASHIPARA E-learning Management System pProject 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the date_start, date_end, and title parameters in a POST HTTP request.

A Stored Cross-Site Scripting (XSS) vulnerability was found in /lms/admin/calendar_of_events.php in KASHIPARA E-learning Management System pProject 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the date_start, date_end, and title parameters in a POST HTTP request.

EPSS

Процентиль: 35%
0.00142
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
12 месяцев назад

A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the date_start, date_end, and title parameters.

EPSS

Процентиль: 35%
0.00142
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79