Priority LOW 30
ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth (e.g., 12072000 for 12 July 2000).
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00249 · Published 2026-06-03 · No fix listed CWE-1391
Priority LOW 23
ProjectsAndPrograms school-management-system is vulnerable to Stored Cross‑Site Scripting (XSS) in multiple attributes of students and teachers objects.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00291 · Published 2026-06-03 · No fix listed CWE-79
Priority HIGH 70
A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00259 · Published 2026-04-20 · No fix listed CWE-74
Priority MEDIUM 57
A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00209 · Published 2026-04-03 · No fix listed CWE-284
Priority HIGH 70
A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00541 · Published 2025-10-13 · No fix listed CWE-287
Priority HIGH 70
A vulnerability has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00461 · Published 2025-10-13 · No fix listed CWE-284
Priority HIGH 70
A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00594 · Published 2025-10-13 · No fix listed CWE-284
Priority HIGH 70
A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00461 · Published 2025-10-13 · No fix listed CWE-284
Priority HIGH 70
A security vulnerability has been detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00594 · Published 2025-10-13 · No fix listed CWE-284
Priority HIGH 70
A weakness has been identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00594 · Published 2025-10-13 · No fix listed CWE-284
Priority MEDIUM 57
A flaw has been found in ProjectsAndPrograms School Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00408 · Published 2025-09-27 · No fix listed CWE-74
Priority LOW 27
A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00228 · Published 2025-08-28 · No fix listed CWE-79