Web-school Enterprise Resource Planning — known CVE vulnerabilities

Every CVE whose affected-product data names Web-school Enterprise Resource Planning, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-30112 — CVSS 6.5 (medium): Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a…
• CVE-2021-30114 — CVSS 6.5 (medium): Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a voucher payment…
• CVE-2021-30113 — CVSS 6.1 (medium): A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields. An attacker can inject a…
• CVE-2021-30111 — CVSS 5.4 (medium): A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An attack can inject a…