A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0. The issue affects some unknown features in the file /Scheduling/pages/class_sched.php. Manipulating the class parameter can lead to cross-site scripting (XSS).
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://github.com/secloverwang/-Vulnerability-recurrence/issues/1 | issue tracking third party advisory exploit |
https://github.com/secloverwang/Vulnerability-recurrence/issues/1 | exploit issue tracking third party advisory |