CVE-2023-49986: XSS
Published Mar 7, 2024
·Updated
A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.
Affected Software
2 affected components
School Fees Management System School Fees Management System
oretnom23 School Fees Management System=1.0
Event History
Dec 20, 2023
Exploit Published
via GitHub·04:21 AM
Mar 7, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-49986?
CVE-2023-49986 is classified as a high-severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2023-49986?
To fix CVE-2023-49986, validate and sanitize the 'name' parameter input in the /admin/parent component.
3
What type of attacks can CVE-2023-49986 enable?
CVE-2023-49986 can enable attackers to execute arbitrary web scripts or HTML, compromising user data and security.
4
Which software versions are affected by CVE-2023-49986?
CVE-2023-49986 affects School Fees Management System version 1.0.
5
How can I detect CVE-2023-49986 in my system?
You can detect CVE-2023-49986 by scanning your application for improper input validation in the /admin/parent component.