~ / search / GHSA-3756-hwhv-qw58

GHSA-3756-hwhv-qw58

Cross site scripting in francoisjacquet/rosariosis

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-44566

Packages

EcosystemPackageAffectedFixed in
Packagist francoisjacquet/rosariosis < 4.3 4.3

Details

As written in the advisory (Markdown source, shown as plain text).

A Cross Site Scripting vulnerability exists RosarioSIS before 4.3 via the SanitizeMarkDown function in ProgramFunctions/MarkDownHTML.fnc.php.

References

External links from the advisory. They lead to third-party sites.