CVE-2021-45416

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-02-01 · updated 2026-07-09
Weakness: CWE-79

Description

Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the modules/Scheduling/Courses.php script.

Affected products

francoisjacquet/rosariosis: 8.2.1

References

https://github.com/86x/CVE-2021-45416
https://github.com/86x/CVE-2021-45416

Get alerted when CVE-2021-45416 or the next vulnerability affects your stack