Limited Black Friday Offer:
Open-Scool 3.0/Community Edition 2.3 - Cross Site Scripting CVE-2019-14696 Scanner
Remote attacker can perform a reflected cross site scripting attack (XSS) by injecting malicious payload.
Short Info
Level
Medium
Type
Single Scan
Can be used by
Asset Owner
Estimated Time
15 sec
Scan only one
Url
Parent Category
Open-Scool 3.0/Community Edition 2.3 - Cross Site Scripting CVE-2019-14696 Scanner Detail
Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.