Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-41239

Опубликовано: 07 авг. 2024
Источник: nvd
CVSS3: 4.8
CVSS3: 5.9
EPSS Низкий

Описание

A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "class_name" parameter field.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:lopalopa:responsive_school_management_system:3.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 38%
0.00166
Низкий

4.8 Medium

CVSS3

5.9 Medium

CVSS3

Дефекты

CWE-79
CWE-79

Связанные уязвимости

CVSS3: 5.9
github
больше 1 года назад

A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Kashipara Responsive School Management System v1.0, which allows remote attackers to execute arbitrary code via "class_name" parameter field.

EPSS

Процентиль: 38%
0.00166
Низкий

4.8 Medium

CVSS3

5.9 Medium

CVSS3

Дефекты

CWE-79
CWE-79