CVE-2024-28097

Summary

CVE-2024-28097 is a stored cross-site scripting vulnerability affecting the calendar functionality in Schoolbox applications prior to version 23.1.3. An authenticated attacker can exploit this weakness to execute malicious scripts in the context of affected users, potentially gaining unauthorized access to security features. This issue poses a serious risk to user data and security actions, making it crucial for Schoolbox users to update to the latest version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.