CVE

CVE-2020-15721

CVE-2020-15721

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php.

Source: CVE-2020-15721

Exit mobile version