QDOCS

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

QDOCS records in CISA KEV

No QDOCS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Smart School 5 records MEDIUM Smart Hospital 1 record LOW

Records

5 records in Smart School · all components

TI-2024-22650 CVE-2024-34240 · GHSA-h4rc-3vfw-rw96

QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in…

MEDIUM 60

QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating records.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00373 Published 2024-05-21 No fix listed CWE-79

TI-2024-08150 CVE-2024-8784 · GHSA-x6p2-rpj7-w423

QDocs Smart School Management System Chat mynewuser sql injection

MEDIUM 57

A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00533 Published 2024-09-13 No fix listed CWE-89

TI-2023-05060 CVE-2023-5495 · GHSA-vv72-36rg-vcmc

QDocs Smart School HTTP POST Request sql injection

MEDIUM 45

A vulnerability was found in QDocs Smart School 6.4.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01214 Published 2023-10-10 No fix listed CWE-89

TI-2025-37697 CVE-2025-60500 · GHSA-rh3g-ww52-5mx2

QDocs Smart School Management System 7.1 allows authenticated users with roles such as…

LOW 34

QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file type restrictions in the media upload feature by abusing the alternate YouTube URL option.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00529 Published 2025-10-21 No fix listed CWE-434

TI-2025-27457 CVE-2025-41107 · GHSA-frv9-vg6r-h5pf

Stored XSS in Smart School

LOW 23

Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/online_admission', wich affects the parameters 'firstname', 'lastname',…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00207 Published 2025-11-10 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	5
Low	0
No CVSS	0