CVE-2021-29663

CourseMS (aka Course Registration Management System) 2.1 is affected by cross-site scripting (XSS)

published March 31, 2021

CVSS
—
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

CourseMS (aka Course Registration Management System) 2.1 is affected by cross-site scripting (XSS). When an attacker with access to an Admin account creates a Job Title in the Site area (aka the admin/add_jobs.php name parameter), they can insert an XSS payload. This payload will execute whenever anyone visits the registration page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00806 · 56.4th percentile
Published
2021-03-31T19:03Z
EPSS history
Timeline
  • 31 MAR 19:03Z
    CourseMS (aka Course Registration Management System) 2.1 is affected by cross-site scripting (XSS)
    cvelistv5