Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Follet School Solutions Clear all filters
TI-2024-31479 CVE-2024-47097 · GHSA-r4h6-8gj4-879v

Reflected Cross-Site Scripting in Follet School Solutions Destiny

Priority LOW 23

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the site parameter of handleloginform.do.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00319 Published 2026-05-28 Fixed in 22.0.1 AU1 CWE-79
TI-2024-31478 CVE-2024-47096 · GHSA-r6jr-62f2-4mw2

Reflected Cross-Site Scripting in Follet School Solutions Destiny

Priority LOW 23

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the showSupportExpiredMessage parameter of handleloginform.do.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00319 Published 2026-05-28 Fixed in 22.0.1 AU1 CWE-79
TI-2024-31477 CVE-2024-47095 · GHSA-vcwm-cq8f-8h8f

Reflected Cross-Site Scripting in Follet School Solutions Destiny

Priority MEDIUM 56

Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the expiredSupportMessage parameter of handleloginform.do.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00539 Published 2024-10-08 Fixed in 22.0.1 AU1 CWE-79