Cross site scripting in francoisjacquet/rosariosis
Moderate severity
GitHub Reviewed
Published
Feb 25, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Feb 24, 2022
Published to the GitHub Advisory Database
Feb 25, 2022
Reviewed
Mar 1, 2022
Last updated
Feb 3, 2023
A Cross Site Scripting (XSS) vulnerabilty exits in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious users to inject arbitrary JaveScript of HTML.An example of affected components are all Markdown input fields.
References