CVE-2021-28424 in Teachersrecordmanagementsystemproject and PHPGurukul Products
Published on July 1, 2021
A stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated users to inject arbitrary web script or HTML via the 'email' POST parameter in adminprofile.php.
Products Associated with CVE-2021-28424
stack.watch emails you whenever new vulnerabilities are published in Teachersrecordmanagementsystemproject Teachers Record Management System or PHPGurukul Teachers Record Management System. Just hit a watch button to start following.
Exploit Probability
EPSS
0.56%
Percentile
67.79%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.