EUVD-2022-48925

Malicious code in bioql PyPI...

CVE-2022-46087

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user...

CVE-2022-46087

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user...

CVE-2022-46087

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user...

Cross site scripting

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user...

CVE-2022-46087

CloudSchool v3.0.1 is affected by Cross-Site Scripting (XSS) via admin notifications, allowing a normal user to steal admin session cookies. The issue is documented with a PoC and public advisories; exploitation exists in reported PoCs. Remediation: upgrade to a version that includes a fix for th...

PT-2023-14810 · Unknown · Cloudschool

Name of the Vulnerable Software and Affected Versions: CloudSchool version 3.0.1 Description: The issue allows a normal user to steal session cookies of admin users through a notification received by the admin user, exploiting a Cross Site Scripting XSS weakness. Recommendations: For CloudSchool...

CVE-2022-46087

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user...

CVE-2022-46087

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting XSS. A normal user can steal session cookies of the admin users through notification received by the admin user...

cloudschool.org Cross Site Scripting vulnerability OBB-2343288

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...