Threats tagged 'ghsa-8w5x-r5m8-f927'

A cross-site scripting (XSS) vulnerability exists in hrshadhin CloudSchool up to version 3.0.1 in the Event Description Handler component. The flaw is due to improper handling of input data in the file app/Http/Controllers/Backend/EventController.php. This vulnerability can be exploited remotely but requires user interaction and elevated privileges. Public exploit code is available, and the vendor has not responded to disclosure attempts.