CVE-2023-5930: Campcodes Simple Student Information System manage_academic.php cross site scripting
A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/students/manageacademic.php. The manipulation of the argument studentid leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-244330 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5930?
The severity of CVE-2023-5930 is medium.
How does CVE-2023-5930 affect Campcodes Simple Student Information System?
CVE-2023-5930 affects Campcodes Simple Student Information System by allowing cross-site scripting via the student_id parameter in the /admin/students/manage_academic.php file.
How can CVE-2023-5930 be exploited?
CVE-2023-5930 can be exploited by manipulating the student_id argument to inject malicious code and execute cross-site scripting attacks.
What is the Common Vulnerabilities and Exposures (CVE) ID of this vulnerability?
The Common Vulnerabilities and Exposures (CVE) ID of this vulnerability is CVE-2023-5930.
How can I fix the cross-site scripting vulnerability in Campcodes Simple Student Information System?
To fix the cross-site scripting vulnerability in Campcodes Simple Student Information System, ensure that input validation and output encoding are implemented properly and securely escape any user-controlled data that is echoed back to the HTML output.