Medium severity6.1NVD Advisory· Published Apr 8, 2021· Updated Jun 17, 2026
CVE-2021-30113
CVE-2021-30113
Description
A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields. An attacker can inject a JavaScript code that will be stored in the page. If any visitor sees the event, then the payload will be executed and sends the victim's information to the attacker website.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Web-School ERP/Web-School ERPdescription
- Range: = 5.0
Patches
Vulnerability mechanics
References
3- github.com/0xrayan/CVEs/issues/1nvdExploitIssue TrackingThird Party Advisory
- web-school.innvdProduct
- web-school.in/try-demo/nvdProduct
News mentions
0No linked articles in our index yet.