| शीर्षक | itsourcecode Student Transcript Processing System V1.0 Cross Site Scripting |
|---|
| विवरण | During the security review of "Student Transcript Processing System",I discovered a critical Cross Site Scripting vulnerability in the "/admin/modules/subject/edit.php" file. This vulnerability is caused by not doing any validation on the user input of the "pre" parameter, and directly outputting the content of this field to the web page. Therefore, an attacker can execute malicious javascript code, obtain the credentials of any user of the system, etc. Immediate remediation measures need to be taken to ensure system security and protect data integrity. |
|---|
| स्रोत | ⚠️ https://github.com/Catcheryp/CVE/issues/5 |
|---|
| उपयोगकर्ता | Catcheryp (UID 51973) |
|---|
| सबमिशन | 01/07/2025 01:57 AM (1 वर्ष पहले) |
|---|
| संयम | 07/07/2025 10:09 AM (6 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 315121 [itsourcecode Student Transcript Processing System 1.0 edit.php pre क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|