CVE-2021-30113

A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields

published April 8, 2021

CVSS
—
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields. An attacker can inject a JavaScript code that will be stored in the page. If any visitor sees the event, then the payload will be executed and sends the victim's information to the attacker website.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00946 · 60.7th percentile
Published
2021-04-08T11:12Z
EPSS history
Timeline
  • 08 APR 11:12Z
    A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields
    cvelistv5