CVE-2025-22930

The OS4ED openSIS student information management system, versions v7.0 through v9.1 , is vulnerable to a SQL injection flaw. The vulnerability exists in the groupid parameter at the /messaging/Group.php endpoint. Attackers could potentially exploit this to interact with the backend database. To m...