Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
m-elementor-addon/trunk/widgets/post_slider.php#L2353 - https://wordpress.org/plugins/gum-elementor-addon/#developers - https://plugins.trac.wordpress.org/changeset/3093511/#file48
CVE ID: CVE-2024-4669 State: PUBLISHED Published: 2024-06-11T20:33:00.670Z Last Updated: 2024-08-01T20:47:41.331Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: nicheaddons Products: Events Addon for Elementor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Basic Slider, Upcoming Events, and Schedule widgets in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attac
cient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d0467548-f1eb-4ea2-9913-4b7ffeb6e91a?source=cve - https://plugins.trac.wordpress.org/browser/events-addon-for-elementor/trunk/elementor/widgets/basic/nabasic-slider.php#L1403 - https://plugins.trac.wordpress.org/browser/events-addon-for-elementor/trunk/elementor/widgets/event-unique
r.php#L1403 - https://plugins.trac.wordpress.org/browser/events-addon-for-elementor/trunk/elementor/widgets/event-unique/naevents-unique-upcoming.php#L1287 - https://plugins.trac.wordpress.org/browser/events-addon-for-elementor/trunk/elementor/widgets/event-unique/naevents-unique-schedule.php#L1267 - https://plugins.trac.wordpress.org/changeset/3100271/#file378
CVE ID: CVE-2024-4670 State: PUBLISHED Published: 2024-05-15T12:46:20.118Z Last Updated: 2024-08-01T20:47:41.380Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: plugins360 Products: All-in-One Video Gallery Problem Types: CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Description: The All-in-One Video Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.5 via the aiovg_search_form shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allow
nticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e2793547-5edf-4d2a-bc3b-fcaeed62963d?source=cve - https://plugins.trac.wordpress.org/changeset/3085217/all-in-one-video-gallery
CVE ID: CVE-2024-4671 State: PUBLISHED Published: 2024-05-09T23:54:09.853Z Last Updated: 2025-10-21T23:05:18.661Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html - https://issues.chromium.org/issues/339266700 - https://lists.fedoraproject.org/archives/list/pack
e-for-desktop_9.html - https://issues.chromium.org/issues/339266700 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQY
5K7YGYNCDN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/
CVE ID: CVE-2024-4672 State: PUBLISHED Published: 2024-05-09T03:52:09.858Z Last Updated: 2024-08-01T20:47:41.550Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/show_student_subject.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263593 was assigned to thi
ed remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263593 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263593 - https://vuldb.com/?ctiid.263593 - https://vuldb.com/?submit.331307 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2022.pdf
CVE ID: CVE-2024-4673 State: PUBLISHED Published: 2024-05-09T10:00:05.386Z Last Updated: 2024-08-01T20:47:41.274Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/show_student_grade_subject.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263594 is the identifier
ack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263594 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263594 - https://vuldb.com/?ctiid.263594 - https://vuldb.com/?submit.331308 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2023.pdf
CVE ID: CVE-2024-4674 State: PUBLISHED Published: 2024-05-09T11:00:05.041Z Last Updated: 2024-08-01T20:47:41.554Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/show_friend_request.php. The manipulation of the argument my_index leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability
remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263595. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263595 - https://vuldb.com/?ctiid.263595 - https://vuldb.com/?submit.331310 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2024.pdf
CVE ID: CVE-2024-4675 State: PUBLISHED Published: 2024-05-09T11:31:04.138Z Last Updated: 2024-08-01T20:47:41.391Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /view/show_events.php. The manipulation of the argument event_id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263596. Addit
The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263596. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263596 - https://vuldb.com/?ctiid.263596 - https://vuldb.com/?submit.331312 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2025.pdf
CVE ID: CVE-2024-4676 State: PUBLISHED Published: 2024-05-09T13:00:06.678Z Last Updated: 2024-08-01T20:47:41.563Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /view/range_grade_text.php. The manipulation of the argument count leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263597 was assigned to this vulnerabil
The exploit has been disclosed to the public and may be used. The identifier VDB-263597 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263597 - https://vuldb.com/?ctiid.263597 - https://vuldb.com/?submit.331313 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2026.pdf
CVE ID: CVE-2024-4677 State: PUBLISHED Published: 2024-05-09T13:31:03.959Z Last Updated: 2024-08-01T20:47:41.458Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /view/my_student_exam_marks1.php. The manipulation of the argument year leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263598 is the identifier assigned to this
k remotely. The exploit has been disclosed to the public and may be used. VDB-263598 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263598 - https://vuldb.com/?ctiid.263598 - https://vuldb.com/?submit.331314 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2027.pdf
CVE ID: CVE-2024-4678 State: PUBLISHED Published: 2024-05-09T14:31:04.068Z Last Updated: 2024-08-01T20:47:41.421Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /view/find_friends.php. The manipulation of the argument my_type leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vul
e launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263599. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263599 - https://vuldb.com/?ctiid.263599 - https://vuldb.com/?submit.331315 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2028.pdf
CVE ID: CVE-2024-4679 State: PUBLISHED Published: 2024-07-02T01:51:01.295Z Last Updated: 2024-08-01T20:47:41.391Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hitachi Products: JP1/Extensible SNMP Agent for Windows, JP1/Extensible SNMP Agent, Job Management Partner1/Extensible SNMP Agent Problem Types: CWE-276 Description: Incorrect Default Permissions vulnerability in Hitachi JP1/Extensible SNMP Agent for Windows, Hitachi JP1/Extensible SNMP Agent on Windows, Hitachi Job Management Partner1/Extensible SNMP Agent on Windows allows File Manipulation.This issue affects JP1/Extensible SNMP Agent for Windows: from 12-00 before 12-00-01, from 11-00 through 11-00
ipulation.This issue affects JP1/Extensible SNMP Agent for Windows: from 12-00 before 12-00-01, from 11-00 through 11-00-*; JP1/Extensible SNMP Agent: from 10-10 through 10-10-01, from 10-00 through 10-00-02, from 09-00 through 09-00-04; Job Management Partner1/Extensible SNMP Agent: from 10-10 through 10-10-01, from 10-00 through 10-00-02, from 09-00 through 09-00-04. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-127/index.html
CVE ID: CVE-2024-4680 State: PUBLISHED Published: 2024-06-08T19:38:31.250Z Last Updated: 2024-08-01T20:47:41.348Z Severity: LOW (CVSS 3.9 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: zenml-io Products: zenml-io/zenml Problem Types: CWE-613 Description: A vulnerability in zenml-io/zenml version 0.56.3 allows attackers to reuse old session credentials or session IDs due to insufficient session expiration. Specifically, the session does not expire after a password change, enabling an attacker to maintain access to a compromised account without the victim's ability to revoke this access. This issue was observed in a self-hosted ZenML deployment via Docker, where after changing the pass
revoke this access. This issue was observed in a self-hosted ZenML deployment via Docker, where after changing the password from one browser, the session remained active and usable in another browser without requiring re-authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/c88f6bd2-490d-4930-98dd-03651b20230a
CVE ID: CVE-2024-4681 State: PUBLISHED Published: 2024-05-09T17:00:06.018Z Last Updated: 2024-08-01T20:47:41.529Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Campcodes Products: Legal Case Management System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/general-setting of the component Setting Handler. The manipulation of the argument favicon/logo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263622 is the identifier assigned to this v
remotely. The exploit has been disclosed to the public and may be used. VDB-263622 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263622 - https://vuldb.com/?ctiid.263622 - https://vuldb.com/?submit.331468 - https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/file_upload.md
CVE ID: CVE-2024-4682 State: PUBLISHED Published: 2024-05-09T17:31:04.351Z Last Updated: 2024-08-01T20:47:41.546Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /view/exam_timetable_update_form.php. The manipulation of the argument exam leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of
ack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263623. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263623 - https://vuldb.com/?ctiid.263623 - https://vuldb.com/?submit.331772 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2029.pdf
CVE ID: CVE-2024-4683 State: PUBLISHED Published: 2024-05-09T18:31:03.718Z Last Updated: 2024-08-01T20:47:41.514Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /view/exam_timetable_insert_form.php. The manipulation of the argument exam leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is
launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263624. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263624 - https://vuldb.com/?ctiid.263624 - https://vuldb.com/?submit.331773 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2030.pdf
CVE ID: CVE-2024-4684 State: PUBLISHED Published: 2024-05-09T19:31:03.717Z Last Updated: 2024-08-01T20:47:41.227Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /view/exam_timetable_grade_wise.php. The manipulation of the argument exam leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263625 was assigned to th
ack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263625 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263625 - https://vuldb.com/?ctiid.263625 - https://vuldb.com/?submit.331774 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2031.pdf
CVE ID: CVE-2024-4685 State: PUBLISHED Published: 2024-05-09T20:00:05.595Z Last Updated: 2024-08-01T20:47:41.464Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view/exam_timetable.php. The manipulation of the argument exam leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263626 is the identifier assigned to this vulnerabil
. The exploit has been disclosed to the public and may be used. VDB-263626 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263626 - https://vuldb.com/?ctiid.263626 - https://vuldb.com/?submit.331775 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2032.pdf
CVE ID: CVE-2024-4686 State: PUBLISHED Published: 2024-05-09T20:31:04.626Z Last Updated: 2024-08-01T20:47:41.552Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /view/emarks_range_grade_update_form.php. The manipulation of the argument grade leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulne
nitiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263627. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263627 - https://vuldb.com/?ctiid.263627 - https://vuldb.com/?submit.331776 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2033.pdf
CVE ID: CVE-2024-4687 State: PUBLISHED Published: 2024-05-09T21:00:04.607Z Last Updated: 2024-08-01T20:47:41.214Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/create_events.php. The manipulation of the argument my_index leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263628. Additio
he exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263628. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263628 - https://vuldb.com/?ctiid.263628 - https://vuldb.com/?submit.331777 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2034.pdf