Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-28096

Stored Cross-site Scripting in Class functionality in Schoolbox

Description

Class functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schoolbox Pty Ltd Schoolbox

Default version status: affected

  • 0 to < 23.1.3affected

References