CVE-2024-4514

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0

Description A problematic vulnerability was found in the Campcodes Complete Web-Based School Management System, affecting an unknown function of the file /view/timetable insert form.php. The manipulation of the grade argument leads to cross-site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations For Campcodes Complete Web-Based School Management System version 1.0, consider disabling access to the /view/timetable insert form.php file until a patch is available. Restrict the manipulation of the grade argument to minimize the risk of exploitation.