Unscored CVE-2019-5970 EUVD-2019-15538GHSA-5c83-27x6-4h58

Cross-site scripting vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML v…

Published Jul 5, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: SUKIMALAB.COM Product: Attendance Manager

Description

Cross-site scripting vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
SUKIMALAB.COM	Attendance Manager	0.5.6 and earlier	—

References

http://attmgr.com/fixed-vulnerability-issue/
https://wordpress.org/plugins/attendance-manager/#developers
https://jvn.jp/en/jp/JVN95685939/index.html
https://wpvulndb.com/vulnerabilities/9434