CVE:CVE-2022-1288
CNNVD:CNNVD-202204-2730
School Club Application System是Carlo Montero个人开发者的一个学校俱乐部应用系统。
School Club Application System 1.0版本存在安全漏洞，该漏洞源于输入“%22%3E%3Cimg%20src=x%20onerror=alert(1)%3E”会导致跨站点脚本漏洞，此问题影响对/scas/admin/的访问。
solution:Upgrade school_club_application_system_project school_club_application_system to a higher version than 1.0,and avoid the version 1.0