medium5.1

CVE-2024-47095

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the exp…

Impact

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the expiredSupportMessage parameter of handleloginform.do.

Affected products

Product	Affected versions
Follet School Solutions Destiny	before 22.0.1

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-79

References

NVD record
CVE.org record
https://www.securin.io/zerodays/cve-2024-47095-reflected-cross-site-scripting-in-follett-school-solutions-destiny-library-manager/