yungifez Skuul 学校管理系统存在通过 SVG 漏洞的 XSS 漏洞

This XSS vulnerability allows an attacker to inject arbitrary JavaScript code into the Skuul School Management System. An attacker could leverage this to steal user credentials, redirect users to malicious websites, or deface the application. The vulnerability's location within the /dashboard/schools/1/edit page suggests that administrators are particularly at risk, as they often have elevated privileges within the system. Given the public availability of an exploit, rapid exploitation is likely. The impact could extend beyond the immediate application, potentially affecting any systems accessible through compromised administrator accounts.

Schools and educational institutions using yungifez Skuul School Management System, particularly those running versions prior to 2.6.6, are at risk. Administrators of the system are at higher risk due to their elevated privileges and frequent access to the /dashboard/schools/1/edit page. Shared hosting environments where multiple users share the same server instance are also vulnerable.

• php / web:

curl -I https://example.com/dashboard/schools/1/edit | grep -i 'X-XSS-Protection'

• php / web: Examine the /dashboard/schools/1/edit file for any unsanitized user input that is directly outputted to the page. • generic web: Monitor access logs for unusual requests targeting /dashboard/schools/1/edit with suspicious parameters. • generic web: Check response headers for unexpected JavaScript code or redirects.

1. 2025-11-30Disclosure

   disclosure

2. 2025-11-30PoC

   poc

最后更新

V2.6.49个月前

1. 已保留2025-11-29
2. 发布日期2025-11-30
3. 修改日期2025-12-08
4. EPSS 更新日期2026-03-23

The primary mitigation for CVE-2025-13784 is to upgrade to version 2.6.6 or later. If upgrading is not immediately feasible, consider implementing input validation and output encoding on user-supplied data within the /dashboard/schools/1/edit page. Web application firewalls (WAFs) configured to detect and block XSS payloads can provide an additional layer of defense. Regularly review and sanitize any SVG files uploaded to the system to prevent malicious code injection.