Web-School Enterprise Resource Planning
4 CVEs affecting Web-School Enterprise Resource Planning. Latest disclosed: 2021-04-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-30114 | Medium | 6.5 | 2021-04-08 | Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a voucher payment request through modul… |
CVE-2021-30112 | Medium | 6.5 | 2021-04-08 | Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a student_leave_application request thr… |
CVE-2021-30113 | Medium | 6.1 | 2021-04-08 | A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields. An attacker can inject a JavaScript code that w… |
CVE-2021-30111 | Medium | 5.4 | 2021-04-08 | A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An attack can inject a JavaScript code tha… |