CVE:CVE-2020-27409
CNNVD:CNNVD-202012-400
Open Solutions For Education openSIS是美国Open Solutions for Education（Open Solutions For Education）公司的一套开源的学生信息管理系统。
OpenSIS Community Edition 7.5之前版本存在跨站脚本漏洞，该漏洞源于受到SideForStudent.php跨站点脚本攻击(XSS)漏洞的影响，通过modname参数。
solution:Upgrade os4ed opensis to a higher version than 7.5,and avoid the version (,7.5)