← CVE Intelligence

CVE-2024-28095

Stored Cross-site Scripting in News functionality in Schoolbox PUBLISHED

Description (CNA)

News functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users.

Affected (CNA)

Vendor / productVersions
Schoolbox Pty Ltd / Schoolboxaffected 0 before 23.1.3

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.