CVE-2024-34240

QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating…

Medium · published May 21, 2024

CVSS v3.1
6.1
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating records.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2024-05-21T17:33Z
EPSS history
Timeline
  • 21 MAY 17:33Z
    QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating…
    cvelistv5