Security Advisory
CVE-2020-15721
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php.