CNNVD-202512-112 Information

CNNVD ID

CNNVD-202512-112

CVE-2025-41070

  • CNNVD Published: 2025-12-01

Description (Chinese)

Sanoma Clickedu是芬兰Sanoma公司的一个综合性教育管理软件平台。 Sanoma Clickedu存在跨站脚本漏洞,该漏洞源于/students/carpetes_varies.php存在反射型跨站脚本,可能导致执行恶意代码或窃取用户数据。

Description (English)

Sanoma Clickedu is a comprehensive educational management software platform for the Finnish company Sanoma. Sanoma Crickedu has a cross-site script loophole, which stems from the presence of a reflector-type cross-site script at /students/carpets varies.php, which may lead to the implementation of malicious codes or the theft of user data.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

Sanoma

Published

2025-12-01

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-sanomas-clickedu

Patch

https://clickedu.net/

Share on: