CVE-2025-52187

GetProjectsIdea Create School Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability in my_profile_update_form1.php. The issue appears to be stored XSS caused by insufficient input sanitization before storing user data, which can execute injected scripts when rendering pa...

PT-2025-31434 · Unknown · Getprojectsidea Create School Management System

Name of the Vulnerable Software and Affected Versions: GetProjectsIdea Create School Management System version 1.0 Description: The application is susceptible to a Cross Site Scripting XSS issue within the my profile update form1.php file. Recommendations: Update to a newer version that contains ...

PT-2025-31252 · Unknown · Phpgurukul Pre-School Enrollment System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Pre-School Enrollment System version 1.0 Description: The application contains a SQL injection vulnerability in the /admin/password-recovery.php file. This is due to insufficient validation of the username parameter. Recommendation...

Institute-of-Current-Students 安全漏洞

Institute-of-Current-Students is a school management website by the individual developer Vishal Mathur. A security vulnerability exists in version 1.0 of Institute-of-Current-Students, which stems from improper email parameter cleanup and could lead to reflective cross-site scripting...

WordPress plugin School Management System for Wordpress 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exis...

PT-2025-29986 · WordPress · School Management System For Wordpress

Name of the Vulnerable Software and Affected Versions: School Management System for Wordpress plugin for WordPress versions prior to 93.1.0 Description: The School Management System for Wordpress plugin for WordPress is vulnerable to Local File Inclusion via the page parameter. This allows...

CVE-2025-7110

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate th...

CVE-2025-7110 Portabilis i-Educar School Module educar_escola_lst.php cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate th...

CVE-2025-47574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-47574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-47574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-47574 WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-47574 WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-47574

CVE-2025-47574 involves WordPress School Management Plugin versions n/a through 92.0.0 and is described as a Reflected Cross‑Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Reports from NVD/Red Hat/Patchstack identify this as a Reflected XSS ...

WordPress和WordPress plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-27104 · Unknown · Mojoomla School Management

Name of the Vulnerable Software and Affected Versions: mojoomla School Management versions n/a through 92.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential...

School Fees Payment System student.php File SQL Injection Vulnerability

School Fees Payment System is a tuition payment system. The School Fees Payment System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /student.php. An attacker can exploit this vulnerability...

Pre-School Enrollment System visit.php file SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter gname in the file /visit.php. An attacker can...

Pre-School Enrollment System add-subadmin.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter sadminusername in the file...

Pre-School Enrollment System enrollment.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter fathername in the file /enrollment.php. An attacke...