Vulnerabilities

TI-2025-27457 CVE-2025-41107 · GHSA-frv9-vg6r-h5pf

Stored XSS in Smart School

LOW 23

Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/online_admission', wich affects the parameters 'firstname', 'lastname',…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00207 Published 2025-11-10 No fix listed CWE-79

TI-2025-37697 CVE-2025-60500 · GHSA-rh3g-ww52-5mx2

QDocs Smart School Management System 7.1 allows authenticated users with roles such as…

LOW 34

QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file type restrictions in the media upload feature by abusing the alternate YouTube URL option.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00529 Published 2025-10-21 No fix listed CWE-434

TI-2024-08150 CVE-2024-8784 · GHSA-x6p2-rpj7-w423

QDocs Smart School Management System Chat mynewuser sql injection

MEDIUM 57

A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00533 Published 2024-09-13 No fix listed CWE-89

TI-2024-22650 CVE-2024-34240 · GHSA-h4rc-3vfw-rw96

QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in…

MEDIUM 60

QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating records.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00373 Published 2024-05-21 No fix listed CWE-79

TI-2023-05060 CVE-2023-5495 · GHSA-vv72-36rg-vcmc

QDocs Smart School HTTP POST Request sql injection

MEDIUM 45

A vulnerability was found in QDocs Smart School 6.4.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01214 Published 2023-10-10 No fix listed CWE-89