VulnerabilityModified
CVE-2017-7621
Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt.
MEDIUM 6.1EPSS 0.67%
Does this matter?
Lower severity and a low EPSS score (0.67%). Track it; it rarely justifies an emergency change on its own.
Description
Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/student_portal/home.php. The affected versions are eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0.
- CVSS 3.0
- 6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.67% probability · 50th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- auromeera/emli
- Source
- cve@mitre.org
References
- https://sudoat.blogspot.in/2017/04/xss-vulnerability-in-multiple-emli.htmlExploit, Third Party Advisory
- https://sudoat.blogspot.in/2017/04/xss-vulnerability-in-multiple-emli.htmlExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.