CVE-2020-15718

MEDIO 6.1CVE-2020-15718 · Published 15/07/2020 · updated 17/06/2026

In breve

CVE-2020-15718 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda rosariosis (rosariosis).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.3%, superiore al 93.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
rosariosis rosariosis	`= 6.7.2`	No fix yet

Description

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attacker could exploit this vulnerability using the include_inactive parameter in a crafted URL.

References

exchange.xforce.ibmcloud.com/vulnerabilities/184944 · Third Party Advisory
MarkLee131/awesome-web-pocs
gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md · Release Notes
gitlab.com/francoisjacquet/rosariosis/-/commit/89ae9de732024e3a2e99262aa98b400a1aa6975a · Patch
gitlab.com/francoisjacquet/rosariosis/-/issues/291 · Broken Link
gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-beta · Third Party Advisory

Altre vulnerabilità di rosariosis

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

rosariosis

= 6.7.2

No fix yet

Altre vulnerabilità di rosariosis

Vedi tutto →