CVE-2021-44565

A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious…

published February 22, 2022

CVSS
—
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious users to inject arbitrary JavaScript or HTML. An example of affected components are all Markdown input fields.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00730 · 53.7th percentile
Published
2022-02-22T19:58Z
EPSS history
Timeline
  • 22 FEB 19:58Z
    A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious…
    cvelistv5