CVE-2024-33911

The School Management 10.3.4 - 认证后SQL注入 漏洞标题: The School Management 10.3.4 - 认证后SQL注入 日期: 2024年4月29日 漏洞作者: Ivan Spiridonov xbz0n 厂商主页: https://the-schoolmanagement.com 版本: 10.3.4 测试环境: Ubuntu 22.04 CVE编号: CVE-2024-33911 漏洞描述 由Weblizar为WordPress开发的The School...

EUVD-2026-59904

The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'order0dir' Parameter in all versions up to, and including, 5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2026-9767 The School Management <= 5.4 - Authenticated (Custom+) SQL Injection via 'order[0][dir]' Parameter

The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'order0dir' Parameter in all versions up to, and including, 5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2026-9767

CVE-2026-9767 affects The School Management – Education & Learning ERP plugin for WordPress up to version 5.4. The vulnerability is a generic SQL Injection via the parameter order[0][dir] in multiple AJAX handlers (e.g., wlsm-fetch-staff-classes, wlsm-fetch-notices, wlsm-fetch-subjects, wlsm-fetc...

CVE-2022-47430

CVE-2022-47430 affects The School Management – Education & Learning Management WordPress plugin (versions ≤ 4.1). Affects the plugin via an improper neutralization of SQL elements, enabling SQL Injection. Public records in the sources note the vulnerability severity varies: NVD indicates CVSS v3....