cvedb.io
CVE-2021-41658
MEDIUM · CVSS 5.4
EPSS exploitation probability: 0%
Published 2022-01-24T17:15:08.107 · Last modified 2026-06-17T04:08:46.760

Summary

Cross Site Scripting (XSS) in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page.

Affected products

student_quarterly_grading_system_project — student_quarterly_grading_system

Does this affect you?

Add your gear to cvedb and we'll alert you only when student_quarterly_grading_system_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.