Cross site scripting

2024-03-0704:15:00

PRIOn knowledge base

www.prio-n.com

news functionality

schoolbox application

stored cross-site scripting

authenticated attacker

security actions

affected users

nvd

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

News functionality in Schoolbox application before
version 23.1.3 is vulnerable to stored cross-site scripting allowing
authenticated attacker to perform security actions in the context of the
affected users.

References

schoolbox.education/

www.themissinglink.com.au/security-advisories/cve-2024-28095