A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function
submitAddPermission
of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument url leads to cross site scripting.
The identification of this vulnerability is CVE-2024-13143. The attack may be initiated remotely. Furthermore, there is an exploit available.
Other parameters might be affected as well.