← CVE Intelligence

CVE-2019-1010028

PHP Scripts Mall Pvt. Ltd. / School College Portal with ERP Script PUBLISHED

Description (CNA)

phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attack administrators and teachers, students and more. The component is: /pro-school/index.php?student/message/send_reply/. The attack vector is: <img src=x onerror=alert(document.domain) />.

Affected (CNA)

Vendor / productVersions
PHP Scripts Mall Pvt. Ltd. / School College Portal with ERP Scriptaffected ≤ 2.6.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.