VULNERABILITIES OF SCHOOL WEBSITES IN V4 COUNTRIES

Software vulnerabilities represent a significant threat to the ICT security of educational institutions. A successful attack can endanger private information of students and employees, and expose the institution's data. This contribution maps the distribution of most common HTTPS and CMS vulnerabilities affecting school webs across all members of Visegrad Group. 36 064 websites of educational institutions were scanned and analysed The most common HTTPS vulnerabilities are BREACH, SWEET32, BEAST and potentially LUCKY13. Approximately 10 % of WordPress installations and more than half of Joomla and Drupal installations suffer from one or more vulnerabilities. File security.txt which could be used to inform the institutions about such vulnerabilities is provided only by a handful of institutions. Although relative usage of CMS varies among countries, vulnerability findings are very similar. Recommendation to mitigate the most common vulnerabilities is given.