First published: Thu Feb 29 2024(Updated: )
Cross Site Scripting (XSS) vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the main_settings component in the phone, address, bank, acc_name, acc_number parameters, new_class and cname parameter, add_new_parent function in the name email parameters, new_term function in the tname parameter, and the edit_student function in the name parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
School Fees Management System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-51800 is classified as a significant severity vulnerability due to its potential for remote code execution via Cross Site Scripting (XSS).
To fix CVE-2023-51800, sanitize and validate all user inputs, especially in the main_settings component to prevent arbitrary code execution.
CVE-2023-51800 affects School Fees Management System version 1.0.
CVE-2023-51800 allows a remote attacker to execute arbitrary code by injecting malicious scripts through vulnerable input fields.
You can determine if your system is vulnerable by checking if you are running School Fees Management System version 1.0 and testing for XSS vulnerabilities in the specified parameters.