Vulnerability Details CVE-2024-28095
News functionality in Schoolbox application before
version 23.1.3 is vulnerable to stored cross-site scripting allowing
authenticated attacker to perform security actions in the context of the
affected users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.9%
CVSS Severity
CVSS v3 Score 7.3
Products affected by CVE-2024-28095
-
cpe:2.3:a:schoolbox:schoolbox:-
-
cpe:2.3:a:schoolbox:schoolbox:21.0.2