XSS in Projectsandprograms School-management-system
CVE-2026-47324
ProjectsAndPrograms school-management-system is vulnerable to Stored Cross‑Site Scripting (XSS) in multiple attributes of students and teachers objects. An authorized attacker (e.g., a teacher or administrator) can inject malicious JavaScr…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.002 (35.3th percentile) — read the EPSS interpretation.
Affected products
- Projectsandprograms School-management-system — versions 6b6fae5
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)
- cvd@cert.pl (product)