CVE-2020-35382: Classroombookings

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.

Affected products

• Classroombookings Classroombookings: before 2.4.1 (fixed in 2.4.1)

Published 2020-12-14. Last modified 2026-06-17.