CVE Intelligence

Follet School Solutions vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Follet School Solutions products: 2 record(s), with severity, exploitation and fixes.

Destiny 2

Exploited only (KEV) →

CVE-2024-47097 Medium · 5.1 CWE-79 May 28, 2026
Reflected Cross-Site Scripting in Follet School Solutions Destiny
Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the site parameter of handleloginform.do.
CVE-2024-47096 Medium · 5.1 CWE-79 May 28, 2026
Reflected Cross-Site Scripting in Follet School Solutions Destiny
Cross Site Scripting vulnerability in Follet School Solutions Destiny before v22.0.1 AU1 allows a remote attacker to run arbitrary client-side code via the showSupportExpiredMessage parameter of handleloginform.do.