Description
News functionality in Schoolbox application before
version 23.1.3 is vulnerable to stored cross-site scripting allowing
authenticated attacker to perform security actions in the context of the
affected users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schoolbox Pty | Schoolbox | < 23.1.3 | 23.1.3 |