CVE-2024-22936: Manuelaldape Parents & Student Portal

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Parents & Student Portal in Genesis School Management Systems in Genesis AIMS Student Information Systems v.3053 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Affected products

• Manuelaldape Parents & Student Portal: version 3053 only

Published 2024-02-29. Last modified 2026-06-17.