CVE-2017-7621

Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/student_portal/home.php. The affected versions are eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0.

Score
CVSS 3.0 6.1 Medium
Status
Modified - cve@mitre.org
Published
2017-04-11
Last modified
2024-08-05
Weaknesses
CWE-79

Affected products

References