CVE-2021-30113

6.1 mediumEPSS 0.9%

Medium (6.1) in web-school enterprise resource planning. EPSS 0.9% chance of exploitation in the next 30 days.

A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields. An attacker can inject a JavaScript code that will be stored in the page. If any visitor sees the event, then the payload will be executed and sends the victim's information to the attacker website.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-04-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

web-school:enterprise_resource_planning

References

http://web-school.in
https://github.com/0xrayan/CVEs/issues/1
https://web-school.in/try-demo/
http://web-school.in
https://github.com/0xrayan/CVEs/issues/1

Check your stack JSON