Description
A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element is an unknown function of the file /admin/enquiry of the component Admission Enquiry Module. Performing a manipulation of the argument Note results in cross site scripting. The attack is possible to be carried out remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QDOCS | Smart School Management System | 7.0, 7.1, 7.2 | — |
References
- VDB-353878 | QDOCS Smart School Management System Admission Enquiry enquiry cross site scripting vdb-entry technical-description
- VDB-353878 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #776300 | QDOCS Smart School : School Management System 7.2 Cross Site Scripting third-party-advisory