CVE-2021-45416

MEDIUM

RosarioSIS XSS Vulnerability

Title source: GitHub Advisory
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-45416 has a selected CVSS score of 6.1 (medium); EIP currently links 1 repository PoC.

Description

Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the modules/Scheduling/Courses.php script.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1

Affected products and versions

1
ProductSourceVersion range

francoisjacquet/rosariosis

Browse Packagist / francoisjacquet/rosariosis
GitHub AdvisoryBefore 8.3 · Fixed in 8.3affected

Proofs of concept

1

Repository PoCs

GitHub86x/CVE-2021-45416Repository PoCby 86x2Not analyzed2 files

HTML · 3.2 KiB

GitHub
PoC details

References

5