CVE-2022-39020: fallo de gravedad alta en Schoolbox
Cross-site scripting in Schoolbox version 21.0.2, by Schoolbox Pty Ltd
Publicada el · Actualizada el
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.6epss 0.4%
probabilidad de explotación
0.4%top 65% de las CVE
explotación observada
noninguna fuente lo reporta
Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Productos afectados
Schoolbox Pty Ltd · SchoolboxCVEs relacionadas — Schoolbox
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-28094HIGHBlind SQL Injection in Chat functionality in SchoolboxEPSS 0.6%CVE-2022-3059HIGHSQL injection in Schoolbox version 21.0.2, by Schoolbox Pty LtdEPSS 0.5%CVE-2024-28097HIGHStored Cross-site Scripting in Calendar functionality in SchoolboxEPSS 0.4%CVE-2024-28096HIGHStored Cross-site Scripting in Class functionality in SchoolboxEPSS 0.4%CVE-2024-28095HIGHStored Cross-site Scripting in News functionality in SchoolboxEPSS 0.3%