CVE-2024-4714

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0

Description A problematic issue has been found in the system, affecting some unknown functionality of the file /model/update subject.php. The manipulation of the name argument leads to cross-site scripting. The attack can be launched remotely.

Recommendations For Campcodes Complete Web-Based School Management System version 1.0, as a temporary workaround, consider restricting access to the /model/update subject.php file until a patch is available. Avoid using the name argument in the affected file to minimize the risk of exploitation.