SourceCodester Simple e-Learning System claire_blake cross site scripting
CVE-2022-2396
3.5LOW
What is CVE-2022-2396?
A vulnerability classified as problematic was found in SourceCodester Simple e-Learning System 1.0. Affected by this vulnerability is an unknown functionality of the file /vcs/claire_blake. The manipulation of the argument Bio with the input ">alert(document.cookie) leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Version(s)
Simple e-Learning System 1.0