https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:41:47.731187+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-41107 CVE-2025-41107 — Stored XSS in Smart School 2026-10-07T11:41:47.733138+00:00

Affected: QDOCS Smart Schoo

Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/online_admission', wich affects the parameters 'firstname', 'lastname', 'guardian_name' and others. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal his/her session cookie details.