CVE-2024-28097: Schoolbox

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Calendar functionality in Schoolbox application before version 23.1.3 is vulnerable to stored cross-site scripting allowing authenticated attacker to perform security actions in the context of the affected users.

Affected products

• Schoolbox Schoolbox: before 23.1.3 (fixed in 23.1.3)

Published 2024-03-07. Last modified 2026-06-17.