PatchTheCVEweb-school vulnerabilities
Recent CVEs affecting web-school products. 4 tracked.
web-school has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-04-08. Highest priority: CVE-2021-30113 (score 42/100).
- CVE-2021-30114 MEDIUM 6.5 DOWNGRADE Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker
- CVE-2021-30113 MEDIUM 6.1 DOWNGRADE A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields
- CVE-2021-30112 MEDIUM 6.5 DOWNGRADE Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker
- CVE-2021-30111 MEDIUM 5.4 DOWNGRADE A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description f
FAQ
How do I fix web-school vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is web-school being exploited right now?
None of the tracked web-school CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which web-school CVE should I patch first?
CVE-2021-30113 currently ranks highest (42/100): A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields.