Unrated

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could expl...

CVE-2020-15717 First seen on SecPulse Jul 16, 2020

Original description The description as published by the source.

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could exploit this vulnerability using the advanced parameter in a crafted URL.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory exchange.xforce.ibmcloud.com
advisory gitlab.com
advisory gitlab.com
patch gitlab.com
report gitlab.com

Key facts

Severity: Unrated
Published: Jul 16, 2020
First seen on SecPulse: Jul 16, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51