Threats tagged 'ghsa-p567-rgff-v7fc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-116217RosarioSIS before 12.9.2 contains a reflected cross-site scripting vulnerability in Medium5.3EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-116217 RosarioSIS versions prior to 12.9.2 contain a reflected cross-site scripting (XSS) vulnerability in the MenuReports.php module. This flaw allows unauthenticated attackers to inject malicious attributes via the menu_id and modname parameters. By tricking a logged-in administrator into clicking a crafted link, attackers can execute JavaScript that steals session and CSRF tokens, enabling them to act with the administrator's privileges. EPSS 0.3%Report on CVE-2026-116217 Vulnerability CWE-79 #ghsa-p567-rgff-v7fc	GCVE Database	2026-10-26

Page 1 of 1