PT-2023-14810 · Unknown · Cloudschool

Name of the Vulnerable Software and Affected Versions: CloudSchool version 3.0.1 Description: The issue allows a normal user to steal session cookies of admin users through a notification received by the admin user, exploiting a Cross Site Scripting XSS weakness. Recommendations: For CloudSchool...