Vulnerability Details CVE-2022-46087
CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification received by the admin user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.6%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2022-46087
-
cpe:2.3:a:cloudschool_project:cloudschool:3.0.1