Reflected Cross-Site Scripting Vulnerability in School Management System for WordPress

CVE-2024-12611

What is CVE-2024-12611?

The School Management System plugin for WordPress is susceptible to reflected cross-site scripting due to insufficient input sanitization and output escaping in the 'title' parameter. This vulnerability allows unauthenticated attackers to craft malicious links that can lead to the injection of arbitrary web scripts into web pages. If a user clicks on a compromised link, it can execute harmful scripts, potentially compromising user data and security. Owners of affected versions are advised to implement immediate updates and security measures.

References