Description

Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltungen/<event_id>" through the "school" input field.

Related CPE's

a

mecodia

feripro

Vulnerable

References

http://feripro.de

http://mecodia.de

https://piuswalter.de/blog/multiple-vulnerabilities-in-feripro/

Third Party Advisory

Weaknesses

[email protected]

Primary
CWE-79

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.4 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2024-08-02T17:16:39.063

2 months ago

Last modified

2024-09-03T20:15:07.887

1 month ago