Medium severity6.1NVD Advisory· Published Jul 14, 2020· Updated Jun 17, 2026
CVE-2020-15721
CVE-2020-15721
Description
RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
francoisjacquet/rosariosisPackagist | < 6.8 | 6.8 |
Affected products
5cpe:2.3:a:rosariosis:rosariosis:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:rosariosis:rosariosis:*:*:*:*:*:*:*:*range: <=6.7.2
- cpe:2.3:a:rosariosis:rosariosis:6.8:-:*:*:*:*:*:*
- cpe:2.3:a:rosariosis:rosariosis:6.8:beta:*:*:*:*:*:*
- RosarioSIS/RosarioSISdescription
Patches
Vulnerability mechanics
References
5- gitlab.com/francoisjacquet/rosariosis/-/commit/c4a694860b50c4aa5c67d6568f7d0613fef1a30dnvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-6vc5-v7hw-h5h2ghsaADVISORY
- gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.mdnvdRelease NotesThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2020-15721ghsaADVISORY
- gitlab.com/francoisjacquet/rosariosis/-/issues/291nvdBroken LinkWEB
News mentions
0No linked articles in our index yet.