CVE-2024-41519

Name of the Vulnerable Software and Affected Versions Feripro versions prior to 2.2.4

Description The issue concerns a Cross Site Scripting (XSS) vulnerability. It can be exploited via the "/admin/programm//zuordnung/veranstaltungen/" endpoint through the school input field.

Recommendations For Feripro versions prior to 2.2.4, update to version 2.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/admin/programm//zuordnung/veranstaltungen/" endpoint and validating the school input field to minimize the risk of exploitation.