Composer francoisjacquet/rosariosis has 17 known advisories in the phpwarden feed. Feed 2026.10.29.4, updated 2026-10-29.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2021-44427 | SQL Injection in rosariosis | critical | 9.8 | <8.1.1 | 8.1.1 |
| CVE-2021-44567 | SQL injection in francoisjacquet/rosariosis | critical | 9.8 | <7.6.1 | 7.6.1 |
| CVE-2021-45416 | RosarioSIS XSS Vulnerability | medium | 0.0 | <8.3 | 8.3 |
| CVE-2023-29918 | RosarioSIS vulnerable to CSV Injection | medium | 5.4 | <=10.8.4 | – |
| CVE-2022-2067 | SQL Injection in RosarioSIS | critical | 9.1 | <9.0 | 9.0 |
| CVE-2020-15721 | Cross-site Scripting in RosarioSIS | medium | 6.1 | <6.8 | 6.8 |
| CVE-2020-13278 | Reflected cross-site scripting in francoisjacquet/rosariosis | medium | 6.1 | <6.5.1 | 6.5.1 |
| CVE-2023-0994 | RosarioSIS Improper Access Control vulnerability | high | 7.5 | <10.8.2 | 10.8.2 |
| CVE-2022-3072 | francoisjacquet/rosariosis vulnerable to Cross-Site Scripting (XSS) | medium | 5.4 | <8.9.3 | 8.9.3 |
| CVE-2022-2036 | Cross site scripting in francoisjacquet/rosariosis | medium | 5.4 | <9.1 | 9.1 |
| CVE-2022-2714 | RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter Inconsistency | high | 8.1 | <10.1 | 10.1 |
| CVE-2021-44565 | Cross site scripting in francoisjacquet/rosariosis | medium | 5.4 | <7.6.1 | 7.6.1 |
| CVE-2021-44566 | Cross site scripting in francoisjacquet/rosariosis | medium | 5.4 | <4.3 | 4.3 |
| CVE-2022-1997 | Cross-site Scripting in RosarioSIS | medium | 5.4 | <9.0 | 9.0 |
| CVE-2023-2665 | RosarioSIS Stores Sensitive Data in a Mechanism without Access Control | high | 7.5 | <11.0 | 11.0 |
| CVE-2023-2202 | RosarioSIS improper access control vulnerability | medium | 6.5 | <10.9.3 | 10.9.3 |
| CVE-2024-3138 | RosarioSIS cross site scripting vulnerability | low | 3.5 | <=11.5.1 | – |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# PHP projects (recommended) composer require --dev phpwarden/phpwarden # then vendor/bin/phpwarden deps composer.lock # or, without Composer pipx install phpwarden && phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked