A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious users to inject arbitrary JavaScript or HTML. An example of affected components are all Markdown input fields.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-02-22T19:58:33

Updated: 2024-08-04T04:25:16.818Z

Reserved: 2021-12-06T00:00:00

Link: CVE-2021-44565

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-02-24T15:15:24.107

Modified: 2024-11-21T06:31:13.487

Link: CVE-2021-44565

cve-icon Redhat

No data.