CVE-2024-4822

Publication date

2024-05-13 11:26:27

Family

INCIBE

State

PUBLISHED

Description

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in /index.php. This vulnerability allows an attacker to partially take control of the victims browser session.