Reflected cross-site scripting in francoisjacquet/rosariosis

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-13278 · ADVISORY
• gitlab.com/francoisjacquet/rosariosis/-/commit/9cb4fec5fe177f1d3716708b46d1958eac477ebe · WEB
• gitlab.com/francoisjacquet/rosariosis/-/issues/282 · WEB
• gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13278.json · WEB

Autres vulnérabilités de francoisjacquet/rosariosis

• CVE-2024-3138FAIBLE 3.5** DISPUTED ** A vulnerability was found in francoisjacquet RosarioSIS 11.5.1. It has been rated as problematic. This issue affects some unk…
• CVE-2023-2665ÉLEVÉE 7.5Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.
• CVE-2023-29918MOYENNE 5.4RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.
• CVE-2023-2202MOYENNE 6.5Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.
• CVE-2023-0994ÉLEVÉE 7.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.