Read the docs

Follet School Solutions

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Follet School Solutions records in CISA KEV

No Follet School Solutions vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-31477 CVE-2024-47095 · GHSA-vcwm-cq8f-8h8f

Reflected Cross-Site Scripting in Follet School Solutions Destiny

Priority MEDIUM 56

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the expiredSupportMessage parameter of handleloginform.do.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00539 Published 2024-10-08 Fixed in 22.0.1 AU1 CWE-79
TI-2024-31479 CVE-2024-47097 · GHSA-r4h6-8gj4-879v

Reflected Cross-Site Scripting in Follet School Solutions Destiny

Priority LOW 23

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the site parameter of handleloginform.do.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00319 Published 2026-05-28 Fixed in 22.0.1 AU1 CWE-79
TI-2024-31478 CVE-2024-47096 · GHSA-r6jr-62f2-4mw2

Reflected Cross-Site Scripting in Follet School Solutions Destiny

Priority LOW 23

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the showSupportExpiredMessage parameter of handleloginform.do.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00319 Published 2026-05-28 Fixed in 22.0.1 AU1 CWE-79
Open these records in search →