Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in School Management System – WPSchoolPress 2.1.10

  • Severity: high-risk
  • Status: Open
  • Publication: October 11, 2021

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to a type of cyber attack called Reflected Cross-Site Scripting. This attack can be used by unauthenticated attackers to inject malicious scripts into pages that are viewed by unsuspecting users. This vulnerability exists in versions prior to 2.1.10 due to a lack of protection from malicious input and a lack of security measures to prevent malicious scripts from executing.

Detected in:

School Management System – WPSchoolPress open vulnerable versions: >= * < 2.1.10

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.