Stored Cross Site Scripting Vulnerability in Sourcecodester Student Attendance Management System
CVE-2021-45866

5.4MEDIUM

Key Information:

Vendor: Student Attendance Management System Project
Status: Student Attendance Management System
Vendor: CVE Published:; 29 March 2022

🔔 Create Student Attendance Management System Project Vulnerability Alert

What is CVE-2021-45866?

A Stored Cross Site Scripting (XSS) vulnerability in Sourcecodester's Student Attendance Management System allows malicious users to inject harmful scripts via the course field in index.php. This can lead to unauthorized access and manipulation of sensitive data. Proper validation and sanitization measures are essential to mitigate this risk.

References

https://github.com/lohyt/XSS-in-Student-attendance-manage...

x_refsource_MISC

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 29, 2022
Vulnerability Reserved
Dec 27, 2021

CVE-2021-45866 Data

JSON