https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T02:48:05.795658+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-4823 CVE-2024-4823 — Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION 2026-10-17T02:48:05.816712+00:00

Affected: AROX SOLUTION School ERP Pro+Responsive, arox school_erp_pro

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/office_admin/' in the parameters es_bankacc, es_bank_name, es_bank_pin, es_checkno, es_teller_number, dc1 and dc2. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.