admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2023/CVE-2023-38881.md
0xMarcio 7490dda3bb Update CVE sources 2024-06-23 04:42
2024-06-23 04:42:52 +00:00

832 B
Raw Blame History

CVE-2023-38881

Description

A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into any of the 'calendar_id', 'school_date', 'month' or 'year' parameters in 'CalendarModal.php'.

POC

Reference

Github

No PoCs found on GitHub currently.