Medium severity6.1NVD Advisory· Published Feb 1, 2022· Updated Jul 9, 2026

CVE-2021-45416

Description

Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the modules/Scheduling/Courses.php script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
francoisjacquet/rosariosisPackagist	< 8.3	8.3

Affected products

RosarioSIS/RosarioSIS
cpe:2.3:a:rosariosis:rosariosis:8.2.1:*:*:*:*:*:*:*
RosarioSIS/RosarioSISdescription
ghsa-coords
pkg:composer/francoisjacquet/rosariosis
Range: < 8.3

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-287r-574x-f4h4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-45416ghsaADVISORY
rosariosis.comghsaWEB
gitlab.com/francoisjacquet/rosariosis/-/commit/aec018065ca12ecef03ee454a8112f992ea35315ghsaWEB
www.youtube.com/watchghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000