Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System < 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.0143·Published 2020-08-12·Fixed in 6.5.1CWE-79