Description
Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System < 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| RosarioSIS | RosarioSIS | =6.5.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | francoisjacquet/rosariosis | < 6.5.1 | 6.5.1 | GHSA-4cx9-7xqc-2jxm |