Описание
A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An attack can inject a JavaScript code that will be stored in the page. If any visitor sees the events, then the payload will be executed.
Ссылки
- Product
- ExploitIssue TrackingThird Party Advisory
- Product
- Product
- ExploitIssue TrackingThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:web-school:enterprise_resource_planning:5.0:*:*:*:*:*:*:*
EPSS
Процентиль: 47%
0.0024
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An attack can inject a JavaScript code that will be stored in the page. If any visitor sees the events, then the payload will be executed.
EPSS
Процентиль: 47%
0.0024
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79