CVE-2024-28097 — Stored Cross-site Scripting in Calendar functionality in Schoolbox

CVE-2024-28097

Stored Cross-site Scripting in Calendar functionality in Schoolbox PUBLISHED

Description (CNA)

Calendar functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users.

Affected (CNA)

Vendor / product	Versions
Schoolbox Pty Ltd / Schoolbox	affected 0 before 23.1.3

CWE

CWE-79

References

https://www.themissinglink.com.au/security-advisories/cve-2024-28097
https://schoolbox.education/

ADP enrichment

CVE

No English description supplied.

https://www.themissinglink.com.au/security-advisories/cve-2024-28097
https://schoolbox.education/

CISA-ADP

No English description supplied.

No references supplied.