What’s Vulnerable › Vulnerabilities

CVE-2024-34240

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-05-21 · updated 2026-06-17
• Weakness: CWE-79

Description

QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating records.

Affected products

• QDOCS Smart School Management System: 7.0.0

References

• https://grumpz.net/cve-2024-34240-latest-stored-xss-0day-vulnerability-unveiled
• https://grumpz.net/cve-2024-34240-latest-stored-xss-0day-vulnerability-unveiled

Get alerted when CVE-2024-34240 or the next vulnerability affects your stack