CVE-2025-1159

Опубликовано: 10 фев. 2025

Источник: nvd

CVSS3: 3.5

CVSS3: 5.4

CVSS2: 4

EPSS Низкий

Описание

A vulnerability was found in CampCodes School Management Software 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academic-calendar. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Ссылки

https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Stored%20Cross%20Site%20Scripting-%20Teachers%20Account%20Takeover%20Possibility.pdf
Exploit
Mitigation
Third Party Advisory
https://vuldb.com/?ctiid.295063
Permissions Required
VDB Entry
https://vuldb.com/?id.295063
Permissions Required
VDB Entry
https://vuldb.com/?submit.493687
Third Party Advisory
VDB Entry
https://www.campcodes.com/
Product
https://github.com/KhukuriRimal/Vulnerabilities/blob/main/Stored%20Cross%20Site%20Scripting-%20Teachers%20Account%20Takeover%20Possibility.pdf
Exploit
Mitigation
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:campcodes:school_management_software:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00101

Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-cqqc-xfhc-44fm

CVSS3: 3.5

github

12 месяцев назад

EPSS

Процентиль: 29%

0.00101

Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79