Skip to content
OpenAdvisories

Vendor

MarkUsProject

8 known vulnerabilities.

Products

Markus 8
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.0
    CVE-2026-28405

    MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions

    MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.1, the courses/<:course_id>/assignments/<:assignment_id>/submissions/html_content route reads the contents of a student-submitted file and renders them wit…

    MarkUsProject Markus
  • High 7.1
    CVE-2024-51743

    Arbitrary File Write leading up to remote code execution (instructor accounts)

    MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability in the update/upload/create file methods in Controllers allows authenticated instructors to write arbitrary fi…

    MarkUsProject Markus
  • High 7.1
    CVE-2024-51499

    MarkUs Arbitrary File Write leading up to remote code execution (student accounts)

    MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability accessible via the update_files method of the SubmissionsController allows authenticated users (e.g. students)…

    MarkUsProject Markus