Description
RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | francoisjacquet/rosariosis | < 6.8 | 6.8 | GHSA-6vc5-v7hw-h5h2 |