Unrated

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exp...

CVE-2020-15716 First seen on SecPulse Jul 16, 2020

Original description The description as published by the source.

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exploit this vulnerability using the tab parameter in a crafted URL.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory exchange.xforce.ibmcloud.com
advisory gitlab.com
advisory gitlab.com
patch gitlab.com
report gitlab.com
web github.com

Key facts

Severity: Unrated
Published: Jul 16, 2020
First seen on SecPulse: Jul 16, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51