CVE-2023-6616: low-severity vulnerability in SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System index.php cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.5epss 0.6%
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247253 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Affected products
SourceCodester · Simple Student Attendance SystemRelated CVEs — SourceCodester Simple Student Attendance System
In the same product, most dangerous first.
CVE-2023-6657MEDIUMSourceCodester Simple Student Attendance System student_form.php sql injectionEPSS 0.9%CVE-2023-6618MEDIUMSourceCodester Simple Student Attendance System index.php file inclusionEPSS 0.9%CVE-2024-1923MEDIUMSourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injectionEPSS 0.8%CVE-2023-6658MEDIUMSourceCodester Simple Student Attendance System sql injectionEPSS 0.8%CVE-2023-6619MEDIUMSourceCodester Simple Student Attendance System class_form.php sql injectionEPSS 0.8%CVE-2023-6617MEDIUMSourceCodester Simple Student Attendance System attendance.php sql injectionEPSS 0.8%