https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-28097.htmlhttps://patchthecve.com/cve/CVE-2024-28097.htmlWed, 17 Jun 2026 07:20:57 +0000HIGH 7.3: Calendar functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users.https://patchthecve.com/cve/CVE-2024-28096.htmlhttps://patchthecve.com/cve/CVE-2024-28096.htmlWed, 17 Jun 2026 07:20:57 +0000HIGH 7.3: Class functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users.https://patchthecve.com/cve/CVE-2024-28095.htmlhttps://patchthecve.com/cve/CVE-2024-28095.htmlWed, 17 Jun 2026 07:20:57 +0000HIGH 7.3: News functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users.https://patchthecve.com/cve/CVE-2024-28094.htmlhttps://patchthecve.com/cve/CVE-2024-28094.htmlWed, 17 Jun 2026 07:20:57 +0000HIGH 8.8: Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, and delete database records.