CVE-2022-1288mediumCWE-79

CVE-2022-1288: fallo de gravedad media en School Club Application System

School Club Application System cross site scripting

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear School Club Application System

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.3epss 0.6%
A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0. This issue affects access to /scas/admin/. The manipulation of the parameter page with the input %22%3E%3Cimg%20src=x%20onerror=alert(1)%3E leads to a reflected cross site scripting. The attack may be initiated remotely and does not require any form of authentication. The exploit has been disclosed to the public and may be used.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Productos afectados
unspecified · School Club Application System
CVEs relacionadas — School Club Application System

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-1287MEDIUMSchool Club Application System resource injectionEPSS 0.7%