CVE-2025-22930

OS4ED openSIS versions v7.0 through v9.1 are affected by a SQL injection vulnerability (CWE-89). The flaw exists in the groupid parameter located at the /messaging/Group.php endpoint. An attacker could exploit this to perform unauthorized database operations. To mitigate this risk, it is recommen...