CVE-2021-44566

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-44566
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-44566.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-44566
Aliases
Published
2022-02-24T15:15:24Z
Modified
2025-07-29T10:12:12.259733Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 4.3 via the SanitizeMarkDown function in ProgramFunctions/MarkDownHTML.fnc.php.

References

Affected packages

Git / github.com/francoisjacquet/rosariosis

Affected ranges

Type
GIT
Repo
https://github.com/francoisjacquet/rosariosis
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Type
GIT
Repo
https://gitlab.com/francoisjacquet/rosariosis
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

2.*

2.9.8

v1.*

v1.2
v1.2.1
v1.2.2
v1.3
v1.3.1
v1.3.2

v2.*

v2.0
v2.0.1
v2.0.2
v2.0.3
v2.0b
v2.0b.2
v2.0b.3
v2.0b3
v2.0b4
v2.1
v2.1.1
v2.2
v2.2.1
v2.2.2
v2.2.3
v2.2.4
v2.2.5
v2.3
v2.3.1
v2.3.2
v2.3.3
v2.3.4
v2.4
v2.4.1
v2.5
v2.5.1
v2.5.2
v2.5.3
v2.5.3b
v2.5.4
v2.5.5
v2.5.6
v2.5.7
v2.5.8
v2.6
v2.6.1
v2.6.2
v2.6.3
v2.6.4
v2.6.5
v2.6.6
v2.7
v2.7-beta
v2.7.1
v2.7.2
v2.7.3
v2.8
v2.8-beta
v2.8-beta2
v2.8-beta3
v2.8-beta4
v2.8.1
v2.8.10
v2.8.11
v2.8.12
v2.8.13
v2.8.14
v2.8.15
v2.8.16
v2.8.17
v2.8.18
v2.8.19
v2.8.2
v2.8.20
v2.8.20bis
v2.8.21
v2.8.22
v2.8.23
v2.8.24
v2.8.25
v2.8.26
v2.8.27
v2.8.3
v2.8.3bis
v2.8.4
v2.8.5
v2.8.6
v2.8.7
v2.8.8
v2.8.9
v2.9
v2.9-beta1
v2.9.1
v2.9.10
v2.9.11
v2.9.12
v2.9.13
v2.9.14
v2.9.15
v2.9.2
v2.9.3
v2.9.4
v2.9.5
v2.9.6
v2.9.7
v2.9.8
v2.9.9

v3.*

v3.0
v3.0.1
v3.0.2
v3.1
v3.1.1
v3.1.2
v3.2
v3.3
v3.3-beta
v3.3.1
v3.3.2
v3.3.3
v3.3.4
v3.4
v3.4.1
v3.4.2
v3.4.3
v3.5
v3.5.1
v3.5.2
v3.5.3
v3.6
v3.6-beta
v3.6.1
v3.7
v3.7-beta
v3.7.1
v3.8
v3.8-beta
v3.8-beta2
v3.9
v3.9-beta
v3.9.1

v4.*

v4.0
v4.0-beta
v4.0-beta2
v4.0-beta3
v4.1
v4.2-beta
v4.3-beta