CVE-2022-46087

2023-01-3015:15:09

Google

osv.dev

0.001 Low

EPSS

Percentile

23.0%

JSON

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification received by the admin user.

CPENameOperatorVersion
school-management-systemeq2.0.3
school-management-systemeq3.0.1
school-management-systemeq2.0
school-management-systemeq2.0.1
school-management-systemeq2.0.2
school-management-systemeq3.0.0
school-management-systemeq2.0.4
school-management-systemeq1.0

Name	Operator	Version
school-management-system	eq	2.0.3
school-management-system	eq	3.0.1
school-management-system	eq	2.0
school-management-system	eq	2.0.1
school-management-system	eq	2.0.2
school-management-system	eq	3.0.0
school-management-system	eq	2.0.4
school-management-system	eq	1.0