CVE-2026-121524

The sumiie24 School-Management-System is vulnerable to a remote SQL injection flaw within the Public Search Feature component, specifically affecting the parent_Login.php file (up to commit d946d649c7c95e101fc5679ecd91999533bb10d7). An attacker can manipulate the email argument to execute arbitra...