CVE-2022-39020

—

CVSS 3.1

6.1 medium

EPSS

<1%p34

Published

Oct 31, 2022 (Oct 31, 2022)

Modified

Jun 17, 2026

Description

Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student assessment submission, file upload, news, ePortfolio and calendar event creation were found to be vulnerable to cross-site scripting.

Vendors: schoolbox
Products: schoolbox
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.