Jenzabar v9.20-v9.2.2 XSS

Description

Jenzabar is higher education’s trusted advisor, offering technology solutions and services to institutions both today and in the future.

Jenzabar v9.20-v9.2.2 is vulnerable to cross-site scripting (XSS). An attacker could use the query parameter to inject web script or HTML (/ics?tool=search&query=). Someone must click the link in order to exploit the flaw.

Recommendation

• Update Jenzabar to the latest version

Written by

Anandhu Krishnan

Lead Engineer

Anandhu is an accomplished Senior Lead Engineer with a strong focus on back-end development. His expertise lies in architecting and optimizing the core of software applications to ensure they run smoothly and efficiently. With a meticulous attention to detail and a deep understanding of data management and server-side operations, Anandhu has been a driving force behind the success of various back-end projects.