CVE-2024-41519

Summary

Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltungen/<event_id>" through the "school" input field.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://piuswalter.de/blog/multiple-vulnerabilities-in-feripro/
• http://feripro.de
• http://mecodia.de

• ←Previous
• Next→