CVE-2024-28096

XSS in Class functionality in Schoolbox

Discovered by Akshay Raj on behalf of The Missing Link Security

Vulnerability Details

Class functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users.

Affected Versions

Before 23.1.3

Fixed Versions

Fixed in: 23.1.3

Latest News