CVE-2023-49983
MEDIUM 6.8EPSS 0.6%
A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.
- CVSS v3.1
- 6.8 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L - EPSS
- 0.57% chance of exploitation in the next 30 days, 45th percentile
- Published
- 2024-03-06
- Updated
- 2024-08-06
Proof-of-concept exploits (1)
- geraldoalcantara/CVE-2023-499830★ · 2023-12-20