Cross Site Scripting (XSS) Vulnerability in Simple Student Attendance System
CVE-2023-51802

6.1MEDIUM

Key Information:

Vendor: Simple Student Attendance System
Status: Simple Student Attendance System
Vendor: CVE Published:; 29 February 2024

🔔 Create Simple Student Attendance System Vulnerability Alert

What is CVE-2023-51802?

Cross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the page or class_month parameter in the /php-attendance/attendance_report component.

References

https://github.com/geraldoalcantara/CVE-2023-51802

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 29, 2024
Vulnerability Reserved
Dec 26, 2023

CVE-2023-51802 Data

JSON