Mecodia Feripro
3 CVEs affecting Mecodia Feripro. Latest disclosed: 2024-08-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41518 | High | 7.5 | 2024-08-02 | An Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in Feripro <= v2.2.3 allows remote attackers to export an XLSX fi… |
CVE-2024-41519 | Medium | 5.4 | 2024-08-02 | Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltungen/<event_id>" through the "school" inpu… |
CVE-2024-41517 | Medium | 5.3 | 2024-08-02 | An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.2.3 allows remote attackers to get a li… |