CVE Feed

    Dashboard / CVE / CVE-2024-13143

    CVE-2024-13143

    A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

    Published:Jan 5, 2025
    Last Modified:Oct 10, 2025
    EPS:Jan 5, 2025
    EPSS Score:0.00075
    CVSS Score:2.4

    Affected Products

    Vendor
    Zerowdd
    Product
    Studentmanager

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-2201 (CVSS 1.9) — A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b…
    CVE-2025-3587 (CVSS 5.3) — A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerabili…
    CVE-2024-13142 (CVSS 5.1) — A vulnerability was found in ZeroWdd studentmanager 1.0. It has been declared as problematic. This vulnerabili…
    CVE-2024-13134 (CVSS 5.3) — A vulnerability, which was classified as critical, was found in ZeroWdd studentmanager 1.0. Affected is the fu…
    CVE-2024-13133 (CVSS 5.3) — A vulnerability, which was classified as critical, has been found in ZeroWdd studentmanager 1.0. This issue af…
    CVE-2023-39094 (CVSS 5.4) — Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitra…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High