A vulnerability, which was classified as problematic, has been found in Campcodes School Management Software 1.0. This issue affects some unknown processing of the file /create-id-card of the component Create Id Card Page. The manipulation of the argument ID Card Title leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/KhukuriRimal/Vulnerabilities/blob/main/CampCodes%20-%20School%20Management%20Software%20-%20Cross%20Site%20Scripting.pdf | Exploit |
| https://vuldb.com/?ctiid.292493 | Permissions Required VDB Entry |
| https://vuldb.com/?id.292493 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.480306 | Third Party Advisory VDB Entry |
| https://www.campcodes.com/ | Product |
Configurations
History
28 Feb 2025, 02:02
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.8 |
| CWE | ||
| References | () https://vuldb.com/?submit.480306 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.292493 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/KhukuriRimal/Vulnerabilities/blob/main/CampCodes%20-%20School%20Management%20Software%20-%20Cross%20Site%20Scripting.pdf - Exploit | |
| References | () https://www.campcodes.com/ - Product | |
| References | () https://vuldb.com/?ctiid.292493 - Permissions Required, VDB Entry | |
| CPE | cpe:2.3:a:campcodes:school_management_software:1.0:*:*:*:*:*:*:* | |
| First Time |
Campcodes school Management Software
Campcodes |
18 Jan 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-18 14:15
Updated : 2025-02-28 02:02
NVD link : CVE-2025-0559
Mitre link : CVE-2025-0559
JSON object : View
Products Affected
campcodes
- school_management_software
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')