Reflected Cross-Site Scripting Vulnerability in School Management System for WordPress

CVE-2024-12611

What is CVE-2024-12611?

The School Management System plugin for WordPress is susceptible to reflected cross-site scripting due to insufficient input sanitization and output escaping in the 'title' parameter. This vulnerability allows unauthenticated attackers to craft malicious links that can lead to the injection of arbitrary web scripts into web pages. If a user clicks on a compromised link, it can execute harmful scripts, potentially compromising user data and security. Owners of affected versions are advised to implement immediate updates and security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References