CVE-2021-40577

Опубликовано: 08 нояб. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter.

Ссылки

http://packetstormsecurity.com/files/165106/Online-Enrollment-Management-System-In-PHP-And-PayPal-1.0-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://medium.com/%40J03KR/cve-2021-40577-ec96a831ba71
http://packetstormsecurity.com/files/165106/Online-Enrollment-Management-System-In-PHP-And-PayPal-1.0-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://medium.com/%40J03KR/cve-2021-40577-ec96a831ba71

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:online_enrollment_management_system_project:online_enrollment_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.0019

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-72mm-g9wv-3mp5

github

больше 3 лет назад