CVE:CVE-2023-3060
CNNVD:CNNVD-202306-112
Agro-School Management System是农校管理系统。
code-projects Agro-School Management System 1.0版本存在跨站脚本漏洞，该漏洞源于btn_functions.php 的函数 doAddQuestion存在安全问题，通过 参数 Question 导致跨站脚本。
solution:Upgrade agro-school_management_system_project agro-school_management_system to a higher version than 1.0,and avoid the version 1.0