← Database

CVE-2022-46087

MEDIUM CVSS: 5.4 Published: 2023-01-30 Modified: 2026-06-17

Description

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification received by the admin user.

Affected Platforms

Cloudschool Project Cloudschool

Weakness Type

CWE-79, CWE-79

References