Lucene search
+L

4286 matches found

RedhatCVE
RedhatCVE
added 2025/07/09 4:15 a.m.14 views

CVE-2025-7110

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate th...

5.4CVSS3.5AI score0.00241EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/07 3:32 a.m.7 views

CVE-2025-7110 Portabilis i-Educar School Module educar_escola_lst.php cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate th...

5.1CVSS6.2AI score0.00241EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/06/29 12:06 p.m.10 views

CVE-2025-47574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

7.1CVSS5.2AI score0.00215EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/27 12:15 p.m.10 views

CVE-2025-47574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

7.1CVSS0.00215EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/06/27 12:15 p.m.9 views

CVE-2025-47574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

7.1CVSS5.2AI score0.00215EPSS
SaveExploits0References3
CVE
CVE
added 2025/06/27 11:52 a.m.25 views

CVE-2025-47574

CVE-2025-47574 involves WordPress School Management Plugin versions n/a through 92.0.0 and is described as a Reflected Cross‑Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Reports from NVD/Red Hat/Patchstack identify this as a Reflected XSS ...

7.1CVSS5.2AI score0.00215EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/27 11:52 a.m.5 views

CVE-2025-47574 WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

7.1CVSS7.2AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/27 11:52 a.m.19 views

CVE-2025-47574 WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

7.1CVSS0.00215EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/06/27 12:00 a.m.13 views

Pre-School Enrollment System add-teacher.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter tsubject in the file /admin/add-teacher.php. An attack...

8.8CVSS8.2AI score0.0037EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:00 a.m.13 views

School Fees Payment System branch.php file cross-site scripting vulnerability

School Fees Payment System is a tuition payment system. School Fees Payment System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Branch/Address/Detail in the file /branch.php, which can be...

5.4CVSS6.2AI score0.00272EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:00 a.m.14 views

Pre-School Enrollment System enrollment.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter fathername in the file /enrollment.php. An attacke...

9.8CVSS8.2AI score0.00448EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/06/27 12:00 a.m.9 views

PT-2025-27104 · Unknown · Mojoomla School Management

Name of the Vulnerable Software and Affected Versions: mojoomla School Management versions n/a through 92.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential...

7.1CVSS6.5AI score0.00215EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/06/27 12:00 a.m.12 views

Pre-School Enrollment System Project update-class-pic.php File Directory Traversal Vulnerability

The Pre-School Enrollment System Project is a preschool enrollment system project. A directory traversal vulnerability exists in Pre-School Enrollment System Project, which stems from a lack of validity checking of paths in the file update-class-pic.php when processing directory requests, and can...

7.5CVSS6.8AI score0.00818EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:00 a.m.20 views

Pre-School Enrollment System add-class.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of the classname parameter in the file /admin/add-class.php for externally entered SQL statements. An...

8.8CVSS8.2AI score0.0037EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.8 views

WordPress和WordPress plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.6AI score0.00215EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/06/27 12:00 a.m.23 views

Pre-School Enrollment System visit.php file SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter gname in the file /visit.php. An attacker can...

9.8CVSS8.2AI score0.00448EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:00 a.m.13 views

Pre-School Enrollment System add-subadmin.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter sadminusername in the file...

8.8CVSS8.2AI score0.0037EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:00 a.m.17 views

School Fees Payment System Cross-Site Request Forgery Vulnerability

School Fees Payment System is a tuition payment system. School Fees Payment System is vulnerable to a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. No details of the vulnerability are...

5.3CVSS6.9AI score0.00252EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:00 a.m.14 views

School Fees Payment System student.php File SQL Injection Vulnerability

School Fees Payment System is a tuition payment system. The School Fees Payment System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /student.php. An attacker can exploit this vulnerability...

9.8CVSS8.2AI score0.01915EPSS
SaveExploits1References1
NVD
NVD
added 2025/06/26 4:15 p.m.17 views

CVE-2025-50350

PHPGurukul Pre-School Enrollment System Project v1.0 is vulnerable to Directory Traversal in manage-classes.php...

5.4CVSS0.00455EPSS
SaveExploits1References1
Rows per page
Query Builder