.. / CVE-2019-14696

• XSS
• Nuclei
• Web

Exploit for Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting (CVE-2019-14696)

Description:

Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter.

Nuclei Template

View the template here CVE-2019-14696.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-14696.yaml

References: