CVE-2023-49986
A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts…
Medium · published March 7, 2024
What it is
A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.
The record
Technical detail
- CVSS v3.1
- 4.7 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00471 · 39.8th percentile
- Published
- 2024-03-07T00:00Z
EPSS history
Timeline