CVE-2022-39020: falha de alta gravidade em Schoolbox
Cross-site scripting in Schoolbox version 21.0.2, by Schoolbox Pty Ltd
Publicada em · Atualizada em
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.6epss 0.4%
probabilidade de exploração
0.4%top 65% das CVEs
exploração observada
nãonenhuma fonte reporta
Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Produtos afetados
Schoolbox Pty Ltd · SchoolboxCVEs relacionadas — Schoolbox
No mesmo produto, das mais perigosas para as menos.
CVE-2024-28094HIGHBlind SQL Injection in Chat functionality in SchoolboxEPSS 0.6%CVE-2022-3059HIGHSQL injection in Schoolbox version 21.0.2, by Schoolbox Pty LtdEPSS 0.5%CVE-2024-28097HIGHStored Cross-site Scripting in Calendar functionality in SchoolboxEPSS 0.4%CVE-2024-28096HIGHStored Cross-site Scripting in Class functionality in SchoolboxEPSS 0.4%CVE-2024-28095HIGHStored Cross-site Scripting in News functionality in SchoolboxEPSS 0.3%