CVE-2021-30111

A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields

published April 8, 2021

CVSS
—
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An attack can inject a JavaScript code that will be stored in the page. If any visitor sees the events, then the payload will be executed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00734 · 53.9th percentile
Published
2021-04-08T11:16Z
EPSS history
Timeline
  • 08 APR 11:16Z
    A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields
    cvelistv5