EUVD-2022-41566

Malicious code in bioql PyPI...

CVE-2022-39020

Multiple instances of XSS stored and reflected was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting...

Cross site scripting

Multiple instances of XSS stored and reflected was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting...

CVE-2022-39020 Cross-site scripting in Schoolbox version 21.0.2, by Schoolbox Pty Ltd

Multiple instances of XSS stored and reflected was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting...

CVE-2022-39020: Improper Neutralization of Input During Web Page Generation

Multiple instances of XSS stored and reflected was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting...

PT-2022-24676 · Schoolbox Pty +1 · Schoolbox

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The application is affected by multiple instances of cross-site scripting XSS, including both stored and reflected XSS. Vulnerable features include student assessment submission, file...