CVE-2024-4714

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /model/update_subject.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263792.

• CWE-79

• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2037.pdfExploit
• https://vuldb.com/?ctiid.263792Permissions Required, VDB Entry
• https://vuldb.com/?id.263792Permissions Required, VDB Entry
• https://vuldb.com/?submit.331880Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2037.pdfExploit
• https://vuldb.com/?ctiid.263792Permissions Required, VDB Entry
• https://vuldb.com/?id.263792Permissions Required, VDB Entry
• https://vuldb.com/?submit.331880Third Party Advisory, VDB Entry

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47134Out-of-bounds write vulnerability exists in Kostac PLC Progr…7.8
• CVE-2024-47135Stack-based buffer overflow vulnerability exists in Kostac P…7.8
• CVE-2024-47136Out-of-bounds read vulnerability exists in Kostac PLC Progra…7.8
• CVE-2024-47137in OpenHarmony v4.1.0 and prior versions allow a local attac…7.8
• CVE-2024-47138The administrative interface listens by default on all inter…9.8
• CVE-2024-47139A stored cross-site scripting (XSS) vulnerability exists in …6.8
• CVE-2024-47140A cross-site scripting (xss) vulnerability exists in the add…5.4
• CVE-2024-47141In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-47142AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and…5.5
• CVE-2024-47143In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-47145Mattermost versions 9.5.x <= 9.5.8 fail to properly authoriz…4.3
• CVE-2024-47146Ruijie Reyee OS versions 2.206.x up to but not including 2.3…6.5