CVE-2007-4945: Multiple cross-site scripting (XSS) vulnerabilities in LetterGrade allow remote attackers to inject arbitra...

Security readout for executives and security teams

CVE-2007-4945 describes multiple cross-site scripting issues in LetterGrade. An attacker could cause the application to store or reflect script or HTML through student email data, a calendar year parameter, or other calendar-related inputs. The record itself warns that provenance is unknown and details come only from third-party information. Exposure is limited to organizations still running LetterGrade, especially instances with accessible student or calendar workflows. The source bundle does not identify affected versions, deployment models, or whether authentication is required. Treat this as an inventory and legacy-risk item. It may matter if LetterGrade is still in use, but the public evidence is old, incomplete, and lacks confirmed active exploitation or severity scoring. Mitigation focus: Determine whether LetterGrade is present in the environment.; Check vendor or trusted advisory guidance for version-specific fixes.; Apply available LetterGrade updates or retire unsupported deployments..

Prepared

Jun 29, 2026, 03:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.