PatchTheCVEschoolbox vulnerabilities
Recent CVEs affecting schoolbox products. 4 tracked.
schoolbox has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-03-07. Highest priority: CVE-2024-28094 (score 42/100).
- CVE-2024-28097 HIGH 7.3 UPGRADE Calendar functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scri
- CVE-2024-28096 HIGH 7.3 UPGRADE Class functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripti
- CVE-2024-28095 HIGH 7.3 UPGRADE News functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scriptin
- CVE-2024-28094 HIGH 8.8 UPGRADE Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabli
FAQ
How do I fix schoolbox vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is schoolbox being exploited right now?
None of the tracked schoolbox CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which schoolbox CVE should I patch first?
CVE-2024-28094 currently ranks highest (42/100): Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabli.