Lucene search
Open-schoolOpen-school
2 matches found
CVE-2019-14696
Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.
6.1CVSS5.9AI score0.13501EPSS
CVE-2019-14754
Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.
9.8CVSS9.8AI score0.00441EPSS