Medium severity6.1NVD Advisory· Published Nov 20, 2023· Updated Jun 17, 2026

CVE-2023-38883

Description

A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'ajax' parameter in 'ParentLookup.php'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dub Flow/Vulnerability Researchreferences

Patches

Vulnerability mechanics

References

github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-38883nvdVendor Advisory
www.os4ed.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000