CVE-2023-1397 — Cross-site Scripting in Online Student Management System

CWE-79 — Cross-site Scripting6 documents6 sources
Severity
6.1MEDIUMNVD
CNA3.5
EPSS
0.3%
top 51.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Online Student Management SystemOnline Student Management System Project Online Student Management System
Timeline
PublishedMar 14
Latest updateDec 30

Description

A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222984.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

🔴Vulnerability Details

3
OSV
af_unix: Fix data races around sk->sk_shutdown.↗2025-12-30
▶
CVEList
SourceCodester Online Student Management System profile.php cross site scripting↗2023-03-14
▶
GHSA
GHSA-2hx8-w2c3-vxv7: A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1↗2023-03-14
▶
CVE-2023-1397 — Cross-site Scripting | cvebase