In breve
- CVE-2021-44565 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda francoisjacquet/rosariosis, rosariosis (rosariosis).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.73%, superiore al 54.3% delle vulnerabilità.
- Correzione: aggiornare a 7.6.1 o successiva.
Description
A Cross Site Scripting (XSS) vulnerabilty exits in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious users to inject arbitrary JaveScript of HTML.An example of affected components are all Markdown input fields.
NVD description
A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious users to inject arbitrary JavaScript or HTML. An example of affected components are all Markdown input fields.
Altre vulnerabilità di francoisjacquet/rosariosis
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free