- Description
- A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the manage-employee.php page of Kashipara Online Attendance Management System V1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the department parameter.
- Source
- cve@mitre.org
- NVD status
- Analyzed
- Products
- online_attendance_management_system
CVSS 3.1
- Type
- Secondary
- Base score
- 5.6
- Impact score
- 4.7
- Exploitability score
- 0.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L
- Severity
- MEDIUM
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-79
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:kashipara:online_attendance_management_system:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B9A9C0A-004B-4527-9B98-B6B402B1A7C2"
}
],
"operator": "OR"
}
]
}
]