Medium severity6.1NVD Advisory· Published May 21, 2024· Updated Jun 17, 2026

CVE-2024-34240

Description

QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating records.

Affected products

Qdocs/Smart Schoolcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 7.0.0

Patches

Vulnerability mechanics

References

grumpz.net/cve-2024-34240-latest-stored-xss-0day-vulnerability-unveilednvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000