4 matches found
CVE-2024-27665
Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...
5.4CVSS5.8AI score0.00429EPSS
SaveExploits1References1
CVE-2024-27665
Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...
5.4CVSS5.5AI score0.00429EPSS
SaveExploits1References1
CVE-2024-27665
The open-source school management software Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XSS) via the file upload feature in the Syllabus module . An attacker can upload a file (such as a PDF) containing an XSS payload; when a user subsequently navigates to Classes -> Syl...
5.4CVSS5.7AI score0.00429EPSS
SaveExploits1References1
20