CVE-2023-49987: XSS

Published Mar 7, 2024

Updated

A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter.

Affected Software

2 affected components

School Fees Management System School Fees Management System

oretnom23 School Fees Management System=1.0

Event History

Mar 7, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-49987?

CVE-2023-49987 is classified as a medium severity vulnerability due to its cross-site scripting (XSS) exploit potential.

How do I fix CVE-2023-49987?

To fix CVE-2023-49987, sanitize and validate user inputs to prevent arbitrary script execution within the tname parameter.

What software is affected by CVE-2023-49987?

CVE-2023-49987 affects School Fees Management System version 1.0.

What type of vulnerability is CVE-2023-49987?

CVE-2023-49987 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.

How can attackers exploit CVE-2023-49987?

Attackers can exploit CVE-2023-49987 by injecting crafted payloads into the tname parameter to execute arbitrary web scripts.