Security Advisory

CVE-2024-4822

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-05-13 11:26:27
Last updated 2024-08-01 20:55:10
Assigner INCIBE
CVSS score 6.5
State PUBLISHED

Description

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session.