← back
CVE-2022-4053

Student Attendance Management System createClass.php cross site scripting

CVSS 2.4 LOWEPSS 0.4%CWE-707
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 2.4EPSS 0.4%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
17 Nov 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function of the file createClass.php. The manipulation of the argument className leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-213846 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →