VendorsDas Infomediaschool_management_systemany version
Vulnerabilities

Das Infomedia School Management System for WordPress any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2024-9659
School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload
Published 2024-11-23 · Analyzed
9.8EPSS 0.017
CVE-2017-14843
Mojoomla School Management System for WordPress allows SQL Injection via the id parameter.
Published 2017-09-27 · Modified
8.81 PoCEPSS 0.027
CVE-2024-9660
School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload
Published 2024-11-23 · Analyzed
8.8EPSS 0.011
CVE-2024-9658
School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation
Published 2025-03-07 · Analyzed
8.8EPSS 0.004
CVE-2024-12609
School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'
Published 2025-03-07 · Analyzed
6.5EPSS 0.004
CVE-2024-12607
School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task'
Published 2025-03-07 · Analyzed
6.5EPSS 0.003
CVE-2024-12611
School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting
Published 2025-03-07 · Analyzed
5.3EPSS 0.003
CVE-2024-12610
School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Published 2025-03-07 · Analyzed
5.3EPSS 0.003