Stud.ip vulnerabilities

1 known vulnerability in Stud.ip from Studip. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Stud.ip: Improper Neutralization of Input During Web Page Generation

  CVE-2023-50982Jan 8, 2024StudipEPSS 1.29%

  Stud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because upload_action and edit_action in Admin_SmileysController do not check the file extension. This leads to remote code execution with the privileges of the www-data user. The