CVE-2021-41658: XSS

Published Jan 24, 2022

Updated

Cross Site Scripting (XSS) in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page.

Affected Software

1 affected component

Student Quarterly Grading System Project Student Quarterly Grading System=1.0

Event History

Jan 24, 2022

CVE Published

via MITRE·04:03 PM

Data Sourced

via MITRE·04:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2021-41658?

CVE-2021-41658 is classified as a medium severity vulnerability due to its potential for Cross Site Scripting (XSS) attacks.

How do I fix CVE-2021-41658?

To fix CVE-2021-41658, validate and sanitize user input for the fullname and username parameters to prevent XSS attacks.

What software is affected by CVE-2021-41658?

CVE-2021-41658 affects version 1.0 of the Student Quarterly Grading System by oretnom23.

What type of vulnerability is CVE-2021-41658?

CVE-2021-41658 is a Cross Site Scripting (XSS) vulnerability that allows the execution of arbitrary code.

How can an attacker exploit CVE-2021-41658?

An attacker can exploit CVE-2021-41658 by injecting malicious scripts through the fullname and username parameters on the users page.